ICX500 vulnerabilities
3 known vulnerabilities in ICX500 from Zenitel. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
ICX500: Improper Neutralization of Special Elements used in an SQL Command
This vulnerability allows attackers to directly query the underlying database, potentially retrieving all data stored in the Billing Admin database, including user credentials. User passwords are stored in plaintext, significantly increasing the severity of th
- 8.4 High severity
ICX500: Improper Neutralization of Special Elements used in a Command
This vulnerability allows malicious actors to execute arbitrary commands on the underlying system of the Zenitel ICX500 and ICX510 Gateway, granting shell access. Exploitation can compromise the device’s availability, confidentiality, and integrity.
- 8.8 High severity
ICX500: Improper Neutralization of Special Elements used in an SQL Command
This vulnerability allows malicious actors to gain unauthorized access to the Zenitel ICX500 and ICX510 Gateway Billing Admin endpoint, enabling them to read the entire contents of the Billing Admin database.