Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2025-59817

Authenticated Remote Code Execution in zForm_auto_config

Description

This vulnerability allows attackers to execute arbitrary commands on the underlying system. Because the web portal runs with root privileges, successful exploitation grants full control over the device, potentially compromising its availability, confidentiality, and integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zenitel TCIS-3+

Default version status: unaffected

  • <9.2.3.3affected

References