CVE-2025-59815: Authenticated Remote Code Execution in the Billing Administration portal
This vulnerability allows malicious actors to execute arbitrary commands on the underlying system of the Zenitel ICX500 and ICX510 Gateway, granting shell access. Exploitation can compromise the device’s availability, confidentiality, and integrity.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59815?
CVE-2025-59815 has a critical severity rating due to the potential for arbitrary command execution on vulnerable devices.
How do I fix CVE-2025-59815?
To mitigate CVE-2025-59815, update the Zenitel ICX500 or ICX510 Gateway to the latest firmware version provided by Zenitel.
Which devices are affected by CVE-2025-59815?
CVE-2025-59815 affects Zenitel ICX500 and ICX510 Gateways.
What are the risks associated with CVE-2025-59815?
Exploitation of CVE-2025-59815 can compromise the availability, confidentiality, and integrity of the affected device.
Can CVE-2025-59815 lead to data breaches?
Yes, CVE-2025-59815 can potentially lead to data breaches due to unauthorized shell access provided to attackers.