Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9
Exploited now
Zenitel records in CISA KEVNo Zenitel vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 50
Remote Code Execution vulnerability that allows unauthenticated attackers to inject arbitrary commands into the hostname of the device.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00773 · Published 2026-01-09 · Fixed in 1.4.3.3 CWE-77
Priority LOW 39
This vulnerability allows unauthenticated attackers to inject an SQL request into GET request parameters and directly query the underlying database.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00405 · Published 2026-01-09 · Fixed in 1.4.3.3 CWE-89
Open these records in search →