Home
HIGH: 8.4 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HDefault status
unaffected
<1.4.3.3 (custom)
affected
Default status
unaffected
<1.4.3.3 (custom)
affected
Description
This vulnerability allows malicious actors to execute arbitrary commands on the underlying system of the Zenitel ICX500 and ICX510 Gateway, granting shell access. Exploitation can compromise the device’s availability, confidentiality, and integrity.
Problem types
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
Product status
<1.4.3.3 (custom)
<1.4.3.3 (custom)
References
wiki.zenitel.com/wiki/ICX_1.4.3.X_-_Release_Notes (Zenitel)
wiki.zenitel.com/wiki/Downloads (Zenitel)
