CVE-2025-15083

Summary

A vulnerability was determined in TOZED ZLT M30s up to 1.47. The affected element is an unknown function of the component UART Interface. Executing manipulation can lead to on-chip debug and test interface with improper access control. The physical device can be targeted for the attack. Attacks of this nature are highly complex. The exploitability is described as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

VendorProductVersion RangeStatus
TOZEDZLT M30s1.0affected
TOZEDZLT M30s1.1affected
TOZEDZLT M30s1.2affected
TOZEDZLT M30s1.3affected
TOZEDZLT M30s1.4affected
TOZEDZLT M30s1.5affected
TOZEDZLT M30s1.6affected
TOZEDZLT M30s1.7affected
TOZEDZLT M30s1.8affected
TOZEDZLT M30s1.9affected
TOZEDZLT M30s1.10affected
TOZEDZLT M30s1.11affected
TOZEDZLT M30s1.12affected
TOZEDZLT M30s1.13affected
TOZEDZLT M30s1.14affected
TOZEDZLT M30s1.15affected
TOZEDZLT M30s1.16affected
TOZEDZLT M30s1.17affected
TOZEDZLT M30s1.18affected
TOZEDZLT M30s1.19affected
TOZEDZLT M30s1.20affected
TOZEDZLT M30s1.21affected
TOZEDZLT M30s1.22affected
TOZEDZLT M30s1.23affected
TOZEDZLT M30s1.24affected
TOZEDZLT M30s1.25affected
TOZEDZLT M30s1.26affected
TOZEDZLT M30s1.27affected
TOZEDZLT M30s1.28affected
TOZEDZLT M30s1.29affected
TOZEDZLT M30s1.30affected
TOZEDZLT M30s1.31affected
TOZEDZLT M30s1.32affected
TOZEDZLT M30s1.33affected
TOZEDZLT M30s1.34affected
TOZEDZLT M30s1.35affected
TOZEDZLT M30s1.36affected
TOZEDZLT M30s1.37affected
TOZEDZLT M30s1.38affected
TOZEDZLT M30s1.39affected
TOZEDZLT M30s1.40affected
TOZEDZLT M30s1.41affected
TOZEDZLT M30s1.42affected
TOZEDZLT M30s1.43affected
TOZEDZLT M30s1.44affected
TOZEDZLT M30s1.45affected
TOZEDZLT M30s1.46affected
TOZEDZLT M30s1.47affected

Weaknesses

  • CWE-1191: On-Chip Debug and Test Interface With Improper Access Control

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: partial

References