Skip to content
OpenAdvisories
High · 8.3 CVE-2025-41361 EUVD-2025-17139GHSA-cvcm-jhp7-5vqh

Uncontrolled resource consumption vulnerability in IDF and ZLF

Published Jun 6, 2025 · Updated Jun 6, 2025 · Assigned by INCIBE

Description

Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. The devices improperly handle TLS requests associated with PROCOME sockets, so TLS requests sent to those PROCOME ports could cause the device to reboot and result in a denial of service. To exploit this vulnerability, PROCOME ports must be configured and active, with communications encryption active.

Affected products

VendorProductAffectedFixed
ZIV IDF and ZLF < 0.10.0-0C08, < 0.10.0-0D00 0.10.0-0C08

References