← CVE Intelligence

CVE-2025-59814

Unauthenticated SQL-injection in password field PUBLISHED

Description (CNA)

This vulnerability allows malicious actors to gain unauthorized access to the Zenitel ICX500 and ICX510 Gateway Billing Admin endpoint, enabling them to read the entire contents of the Billing Admin database.

Affected (CNA)

Vendor / productVersions
Zenitel / ICX500affected <1.4.3.3
Zenitel / ICX510affected <1.4.3.3

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.