This vulnerability allows unauthenticated attackers to inject an SQL request into GET request parameters and directly query the underlying database.
References
| Link | Resource |
|---|---|
| https://www.zenitel.com/sites/default/files/2025-12/A100K12333%20Zenitel%20Security%20Advisory.pdf | Vendor Advisory |
Configurations
History
12 Feb 2026, 17:42
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.zenitel.com/sites/default/files/2025-12/A100K12333%20Zenitel%20Security%20Advisory.pdf - Vendor Advisory | |
| CPE | cpe:2.3:h:zenitel:icx510:-:*:*:*:*:*:*:* cpe:2.3:h:zenitel:icx500:-:*:*:*:*:*:*:* cpe:2.3:o:zenitel:icx510_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:zenitel:icx500_firmware:*:*:*:*:*:*:*:* |
|
| First Time |
Zenitel
Zenitel icx510 Firmware Zenitel icx500 Zenitel icx510 Zenitel icx500 Firmware |
09 Jan 2026, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-89 |
09 Jan 2026, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-09 10:15
Updated : 2026-02-12 17:42
NVD link : CVE-2025-64092
Mitre link : CVE-2025-64092
CVE.ORG link : CVE-2025-64092
JSON object : View
Products Affected
zenitel
- icx510_firmware
- icx500_firmware
- icx510
- icx500
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')