Description
An OS command injection vulnerability exists due to improper input
validation. The application accepts a parameter directly from user input
without verifying it is a valid IP address or filtering potentially
malicious characters. This could allow an unauthenticated attacker to
inject arbitrary commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zenitel | TCIV-3+ | ≤ 9.3.3.0 | — |
Advisories 1
- ICSA-25-329-03 Zenitel TCIV-3+ CISA ICS & IT advisories · Nov 25, 2025