CVE-2025-64092 — Unauthenticated SQL injection via GET request parameters

CVE-2025-64092

Unauthenticated SQL injection via GET request parameters PUBLISHED

Description (CNA)

This vulnerability allows unauthenticated attackers to inject an SQL request into GET request parameters and directly query the underlying database.

Vendor / product	Versions
Zenitel / ICX500	affected <1.4.3.3
Zenitel / ICX510	affected <1.4.3.3

No CWE identifiers supplied.

CISA-ADP

No English description supplied.

No references supplied.