CVE-2025-15083: TOZED ZLT M30s UART on-chip debug and test interface with improper access control
A vulnerability was determined in TOZED ZLT M30s up to 1.47. The affected element is an unknown function of the component UART Interface. Executing manipulation can lead to on-chip debug and test interface with improper access control. The physical device can be targeted for the attack. Attacks of this nature are highly complex. The exploitability is described as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15083?
CVE-2025-15083 has a critical severity due to improper access control in the UART interface, allowing unauthorized access.
How do I fix CVE-2025-15083?
To fix CVE-2025-15083, update the TOZED ZLT M30s firmware to version 1.48 or later as this version addresses the vulnerability.
What software versions are affected by CVE-2025-15083?
CVE-2025-15083 affects TOZED ZLT M30s devices running versions up to and including 1.47.
What kind of attack can exploit CVE-2025-15083?
An attacker can exploit CVE-2025-15083 to gain unauthorized access to the on-chip debug and test interface.
Who is the vendor associated with CVE-2025-15083?
The vendor associated with CVE-2025-15083 is TOZED, specifically concerning their ZLT M30s product.