TOZED vulnerabilities
We track 4 vulnerabilities in TOZED products across 4 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2026.
Latest TOZED vulnerabilities
- 10.0 Critical severity
X300: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function process_ping of the component IPPingDiagnostics Handler. The manipulation of the argument Host results in os command injection. The attack can be launched remotely. T
- 7.5 High severity
ZLT M30s: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability was found in TOZED ZLT M30s up to 1.47. Impacted is an unknown function of the file /reqproc/proc_post of the component Web Management Interface. Performing manipulation of the argument goformId results in information disclosure. It is possible
- 8.8 High severity
ZLT M30S: Use of Hard-coded Password
A vulnerability has been found in TOZED ZLT M30S and ZLT M30S PRO 1.47/3.09.06. Affected is an unknown function of the component Web Interface. Such manipulation leads to hard-coded credentials. The attack needs to be initiated within the local network. The ex
- 7.3 High severity
ZLT W51: Improper Clearing of Heap Memory Before Release
A vulnerability was found in TOZED ZLT W51 up to 1.4.2 and classified as critical. Affected by this issue is some unknown functionality of the component Service Port 7777. The manipulation leads to improper clearing of heap memory before release. The attack ma