← Back to CVEs
CVE-2025-64092
HIGH7.5
Description
This vulnerability allows unauthenticated attackers to inject an SQL request into GET request parameters and directly query the underlying database.
CVE Details
CVSS v3.1 Score7.5
SeverityHIGH
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack VectorNETWORK
ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
Published1/9/2026
Last Modified2/12/2026
Sourcenvd
Honeypot Sightings0
Affected Products
zenitel:icx500zenitel:icx500_firmwarezenitel:icx510zenitel:icx510_firmware
Weaknesses (CWE)
CWE-89
References
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.