GCVE-110-NCSC-2025-299

Advisory PublishedCVSS 8.8/10

Vulnetix · Advisory published September 26, 2025

A vulnerability in the Zenitel ICX500 and ICX510 Gateway allows unauthorized access to the Billing Admin endpoint, enabling malicious actors to read the entire Billing Admin database.

Download JSON Open in Console

Weaknesses (CWE)

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')

Risk Scores

CVSS 3.1

8.8/10

High · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
Zenitel	vers:unknown/*	—	—

Aliases

CVE-2025-59814 CVE-2025-59815 CVE-2025-59816 CVE-2025-59817

References

advisory

Browse GCVE Records

74,267 records in the GCVE database · Updated July 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON