---
id: CVE-2025-59817
title: >-
  This vulnerability allows attackers to execute arbitrary commands on the
  underlying system
summary: >-
  This vulnerability allows attackers to execute arbitrary commands on the
  underlying system. Because the web portal runs with root privileges,
  successful exploitation grants full control over the device, potentially
  compromising its avail…
severity: high
cvss: 8.4
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H'
cwe:
  - CWE-77
published: '2025-09-25'
updated: '2026-10-11'
sourceUpdated: '2026-10-11T20:10:00.200'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-59817'
references:
  - url: 'https://wiki.zenitel.com/wiki/Downloads#Stations_and_Devices'
    label: cert@ncsc.nl
tags:
  - nvd
epss: 0.00247
epssPercentile: 0.14752
ingestedAt: '2026-10-12T14:50:33.998Z'
---

## Overview

This vulnerability allows attackers to execute arbitrary commands on the underlying system. Because the web portal runs with root privileges, successful exploitation grants full control over the device, potentially compromising its availability, confidentiality, and integrity.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.