Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2025-41361

Uncontrolled resource consumption vulnerability in IDF and ZLF

Description

Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. The devices improperly handle TLS requests associated with PROCOME sockets, so TLS requests sent to those PROCOME ports could cause the device to reboot and result in a denial of service. To exploit this vulnerability, PROCOME ports must be configured and active, with communications encryption active.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ZIV IDF and ZLF

Default version status: unaffected

  • 0 to < 0.10.0-0C08affected
  • 0 to < 0.10.0-0D00affected

References