Description
An OS command injection vulnerability exists due to incomplete
validation of user-supplied input. Validation fails to enforce
sufficient formatting rules, which could permit attackers to append
arbitrary data. This could allow an unauthenticated attacker to inject
arbitrary commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zenitel | TCIV-3+ | ≤ 9.3.3.0 | — |
Advisories 1
- ICSA-25-329-03 Zenitel TCIV-3+ CISA ICS & IT advisories · Nov 25, 2025