CVE-2025-41361

N/A

Description

Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. The devices improperly handle TLS requests associated with PROCOME sockets, so TLS requests sent to those PROCOME ports could cause the device to reboot and result in a denial of service. To exploit this vulnerability, PROCOME ports must be configured and active, with communications encryption active.

CVE Details

CVSS v3.1 ScoreN/A

Published6/6/2025

Last Modified6/6/2025

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-400

References

https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-zivs-idf-and-zlf-products(cve-coordination@incibe.es)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.