zenitel
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 29 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 6, 2018 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →OS command injection via DHCP option 66 in Zenitel EdgeAudioClient TFTP provisioning
Zenitel Connect host applies rsyslog configuration written to a volume shared with the hiatus container
Zenitel Connect OS command injection in hiatus container via unsanitized filename in audio messages API
Path traversal in Zenitel turbineweb certificate upload allows arbitrary file write as root
Zenitel Connect pREST API adopts arbitrary PostgreSQL role from unvalidated JWT sub claim
Path traversal in Zenitel turbineweb certificate delete RPC allows arbitrary file deletion as root
Zenitel Connect web interface serves production JavaScript source maps without authentication
Zenitel Connect login allows account-lockout denial of service
Zenitel Connect missing lockout and rate limiting on the WAMP-CRA authentication channel
Zenitel Connect web interface loads integration iframe without sandboxing or origin restriction
Monitor zenitel in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.