Description
A vulnerability was determined in TOZED ZLT M30s up to 1.47. The affected element is an unknown function of the component UART Interface. Executing manipulation can lead to on-chip debug and test interface with improper access control. The physical device can be targeted for the attack. Attacks of this nature are highly complex. The exploitability is described as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-12-25
Score: 1 Low
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 20 Jan 2026 19:45:00 +0000

Type Values Removed Values Added
First Time appeared Gztozed
Gztozed zlt M30s
Gztozed zlt M30s Firmware
CPEs cpe:2.3:h:gztozed:zlt_m30s:-:*:*:*:*:*:*:*
cpe:2.3:o:gztozed:zlt_m30s_firmware:*:*:*:*:*:*:*:*
Vendors & Products Gztozed
Gztozed zlt M30s
Gztozed zlt M30s Firmware

Tue, 30 Dec 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 29 Dec 2025 23:15:00 +0000

Type Values Removed Values Added
First Time appeared Tozed
Tozed zlt M30s
Vendors & Products Tozed
Tozed zlt M30s

Thu, 25 Dec 2025 17:45:00 +0000

Type Values Removed Values Added
Description A vulnerability was determined in TOZED ZLT M30s up to 1.47. The affected element is an unknown function of the component UART Interface. Executing manipulation can lead to on-chip debug and test interface with improper access control. The physical device can be targeted for the attack. Attacks of this nature are highly complex. The exploitability is described as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Title TOZED ZLT M30s UART on-chip debug and test interface with improper access control
Weaknesses CWE-1191
References
Metrics cvssV2_0

{'score': 1.2, 'vector': 'AV:L/AC:H/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 2, 'vector': 'CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 2, 'vector': 'CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 1, 'vector': 'CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Gztozed Zlt M30s Zlt M30s Firmware
Tozed Zlt M30s
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2025-12-30T21:09:24.413Z

Reserved: 2025-12-25T09:36:38.360Z

Link: CVE-2025-15083

cve-icon Vulnrichment

Updated: 2025-12-30T21:09:21.540Z

cve-icon NVD

Status : Analyzed

Published: 2025-12-25T18:15:40.173

Modified: 2026-01-20T19:35:29.543

Link: CVE-2025-15083

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-12-29T22:33:36Z

Weaknesses