Zenitel TCIV-3+ IP video door phones Buffer Overflow DoS

The vulnerability of the microprogrammed software of the Zenitel TCIV-3+ IP video door phones is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...

CVE-2025-64128 Zenitel TCIV-3+ OS Command Injection

An OS command injection vulnerability exists due to incomplete validation of user-supplied input. Validation fails to enforce sufficient formatting rules, which could permit attackers to append arbitrary data. This could allow an unauthenticated attacker to inject arbitrary commands...