ZLT M30s vulnerabilities

2 known vulnerabilities in ZLT M30s from TOZED. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  ZLT M30s: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2025-15082Dec 25, 2025TOZED

  A vulnerability was found in TOZED ZLT M30s up to 1.47. Impacted is an unknown function of the file /reqproc/proc_post of the component Web Management Interface. Performing manipulation of the argument goformId results in information disclosure. It is possible

• 8.8 High severity

  ZLT M30S: Use of Hard-coded Password

  CVE-2025-14126Dec 6, 2025TOZED

  A vulnerability has been found in TOZED ZLT M30S and ZLT M30S PRO 1.47/3.09.06. Affected is an unknown function of the component Web Interface. Such manipulation leads to hard-coded credentials. The attack needs to be initiated within the local network. The ex