Skip to content
OpenAdvisories
High · 8.4 CVE-2025-59815 EUVD-2025-31159GHSA-86g2-v9c6-vg83

Authenticated Remote Code Execution in the Billing Administration portal

Published Sep 25, 2025 · Updated Sep 29, 2025 · Assigned by NCSC-NL

Description

This vulnerability allows malicious actors to execute arbitrary commands on the underlying system of the Zenitel ICX500 and ICX510 Gateway, granting shell access. Exploitation can compromise the device’s availability, confidentiality, and integrity.

Affected products

VendorProductAffectedFixed
Zenitel ICX500 <1.4.3.3 —
Zenitel ICX510 <1.4.3.3 —

Advisories 1

References