CVE-2025-15083
LowCVSS 2.0Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
A vulnerability in TOZED ZLT M30s up to 1.47 in the UART interface allows access to on-chip debug and test interface with improper access control. The attack requires physical access, is highly complex and difficult to exploit. The exploit has been publicly disclosed and the vendor has not responded.
Risk Assessment
Risk of unauthorized access to low-level debugging functions, potentially enabling full device control.
Recommendation
Restrict physical access to the device and secure the UART interface against unauthorized use.
Other vulnerabilities in TOZED ZLT M30s
Original NVD description (English source)
A vulnerability was determined in TOZED ZLT M30s up to 1.47. The affected element is an unknown function of the component UART Interface. Executing manipulation can lead to on-chip debug and test interface with improper access control. The physical device can be targeted for the attack. Attacks of this nature are highly complex. The exploitability is described as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS