CoreCVE
Back

MEDIUM

CORS vulnerability in IDF and ZLF

Published Jun 6, 2025

Description

In IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04, a configuration error has been detected in cross-origin resource sharing (CORS). Exploiting this vulnerability requires authenticating to the device and executing certain commands that can be executed with view permission.

Affected products

Remediation

Vendor solution

The vulnerability has been fixed by ZIV in firmware version 1.1.0.

Weaknesses (1)

CWE-942

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner INCIBE
Published Jun 6, 2025
Updated Jun 6, 2025
Reserved Apr 16, 2025
Link CVE-2025-41363
CISA Vulnrichment
Updated Jun 6, 2025
NVD
Status Deferred
Modified Jun 17, 2026
Link CVE-2025-41363
Red Hat
Severity n/a
Public date n/a
Links CVE-2025-41363