Description
An OS command injection vulnerability exists due to insufficient
sanitization of user-supplied input. The application accepts parameters
that are later incorporated into OS commands without adequate
validation. This could allow an unauthenticated attacker to execute
arbitrary commands remotely.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zenitel | TCIV-3+ | ≤ 9.3.3.0 | — |
Advisories 1
- ICSA-25-329-03 Zenitel TCIV-3+ CISA ICS & IT advisories · Nov 25, 2025