high7.5
CVE-2025-64092
This vulnerability allows unauthenticated attackers to inject an SQL request into GET request parameters and directly query the underlying database.
Impact
This vulnerability allows unauthenticated attackers to inject an SQL request into GET request parameters and directly query the underlying database.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zenitel | Icx500 Firmware | before 1.4.3.3 |
| Zenitel | Icx510 Firmware | before 1.4.3.3 |