CVE-2025-64128 — Zenitel TCIV-3+ OS Command Injection
An OS command injection vulnerability exists due to incomplete validation of user-supplied input. Validation fails to enforce sufficient formatting rules, which could permit a…
Published: 2025-11-26 · CVSS: 10.0 · CVSS 4.0
An OS command injection vulnerability exists due to incomplete validation of user-supplied input. Validation fails to enforce sufficient formatting rules, which could permit attackers to append arbitrary data. This could allow an unauthenticated attacker to inject arbitrary commands.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7