Skip to content
OpenAdvisories
Critical · 10.0 CVE-2025-64093 EUVD-2026-1756GHSA-pf7q-gxvm-9794

Unauthenticated Remote Code Execution via the device hostname

Published Jan 9, 2026 · Updated Jan 9, 2026 · Assigned by NCSC-NL

Description

Remote Code Execution vulnerability that allows unauthenticated attackers to inject arbitrary commands into the hostname of the device.

Affected products

VendorProductAffectedFixed
Zenitel ICX500 <1.4.3.3 —
Zenitel ICX510 <1.4.3.3 —

References