Skip to content
OpenAdvisories
High · 8.8 CVE-2025-59814 EUVD-2025-31160GHSA-crrh-qjjh-3jrf

Unauthenticated SQL-injection in password field

Published Sep 25, 2025 · Updated Sep 29, 2025 · Assigned by NCSC-NL

Description

This vulnerability allows malicious actors to gain unauthorized access to the Zenitel ICX500 and ICX510 Gateway Billing Admin endpoint, enabling them to read the entire contents of the Billing Admin database.

Affected products

VendorProductAffectedFixed
Zenitel ICX500 <1.4.3.3 —
Zenitel ICX510 <1.4.3.3 —

Advisories 1

References