Zenitel Tcis-3 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Zenitel Tcis-3 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2025-59818 — CVSS 10.0 (critical): This vulnerability allows authenticated attackers to execute arbitrary commands on the underlying system using the file name of an uploaded…
• CVE-2025-64090 — CVSS 10.0 (critical): This vulnerability allows authenticated attackers to execute commands via the hostname of the device.
• CVE-2025-64091 — CVSS 8.6 (high): This vulnerability allows authenticated attackers to execute commands via the NTP-configuration of the device.