Approved changes feed: RSS · Atom

cpe:2.3:a:tozed:zlt_m30s_pro:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTozed (d1efb39b-a040-54dd-8c8c-413ebb1f17bd)
ProductZlt M30S Pro (6cb53a92-1646-5fa7-ab57-0fec00ad8e7c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-14126 vulnerable 2026-06-08 07:06:33.637882 TOZED ZLT M30S/ZLT M30S PRO Web hard-coded credentials
HIGH (8.8)
A vulnerability has been found in TOZED ZLT M30S and ZLT M30S PRO 1.47/3.09.06. Affected is an unknown function of the component Web Interface. Such manipulation leads to hard-coded credentials. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-12-06T10:02:05.279Z
Updated: 2025-12-08T17:14:25.265Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14105 vulnerable 2026-06-08 07:06:33.594922 TOZED ZLT M30S/ZLT M30S PRO Web proc_post denial of service
MEDIUM (4.3)
A vulnerability was determined in TOZED ZLT M30S and ZLT M30S PRO 1.47/3.09.06. This impacts an unknown function of the file /reqproc/proc_post of the component Web Interface. Executing manipulation of the argument goformId with the input REBOOT_DEVICE can lead to denial of service. The attack can only be done within the local network. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-12-05T21:02:06.983Z
Updated: 2025-12-05T21:48:07.945Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.