CVE-2025-59814: Unauthenticated SQL-injection in password field
This vulnerability allows malicious actors to gain unauthorized access to the Zenitel ICX500 and ICX510 Gateway Billing Admin endpoint, enabling them to read the entire contents of the Billing Admin database.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59814?
CVE-2025-59814 is considered a critical vulnerability as it allows unauthorized access to sensitive database information.
How do I fix CVE-2025-59814?
To fix CVE-2025-59814, update the Zenitel ICX500 and ICX510 devices to the latest firmware version provided by Zenitel.
What kind of access does CVE-2025-59814 provide to attackers?
CVE-2025-59814 allows attackers to gain unauthorized access to the Billing Admin database, potentially exposing sensitive billing information.
Are Zenitel ICX500 and ICX510 the only affected products for CVE-2025-59814?
Yes, CVE-2025-59814 specifically affects Zenitel ICX500 and ICX510 models.
How can I determine if my Zenitel device is vulnerable to CVE-2025-59814?
Check if your Zenitel ICX500 or ICX510 device is running an outdated firmware version to determine vulnerability to CVE-2025-59814.