CVE-2025-41360 - Uncontrolled resource consumption vulnerability in IDF and ZLF

Back Back to CVE browser

HIGH

Uncontrolled resource consumption vulnerability in IDF and ZLF

Published Jun 6, 2025

8.7

HIGH

CVSS 4.0

EPSS 0.39%

Description

Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. The device is vulnerable to a packet flooding denial of service attack.

Affected products

Vendor ZIV Product IDF and ZLF Default
unaffected
Affected
- ≥ 0, < 1.1.0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
ZIV	IDF and ZLF	unaffected	Affected ≥ 0, < 1.1.0

Remediation

Vendor solution

The vulnerability has been fixed by ZIV in firmware version 1.1.0.

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-17128		Advisory
https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-zivs-idf-and-zlf-products

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner INCIBE

Published Jun 6, 2025

Updated Jun 6, 2025

Reserved Apr 16, 2025

Link CVE-2025-41360

CISA Vulnrichment

Updated Jun 6, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-41360

Red Hat

No data

ENISA EUVD

Assigner INCIBE

Published Jun 6, 2025

Updated Jun 6, 2025

Link EUVD-2025-17128

GitHub

No data