{"api_version":"1","generated_at":"2026-10-23T00:53:36+00:00","cve":"CVE-2025-15082","urls":{"html":"https://cve.report/CVE-2025-15082","api":"https://cve.report/api/cve/CVE-2025-15082.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2025-15082","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-15082"},"summary":{"title":"TOZED ZLT M30s Web Management proc_post information disclosure","description":"A vulnerability was found in TOZED ZLT M30s up to 1.47. Impacted is an unknown function of the file /reqproc/proc_post of the component Web Management Interface. Performing manipulation of the argument goformId results in information disclosure. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.","state":"PUBLISHED","assigner":"VulDB","published_at":"2025-12-25 17:15:41","updated_at":"2026-10-07 13:10:00"},"problem_types":["CWE-200","CWE-284","NVD-CWE-noinfo","CWE-200 Information Disclosure","CWE-284 Improper Access Controls"],"metrics":[{"version":"4.0","source":"cna@vuldb.com","type":"Secondary","score":"5.5","severity":"MEDIUM","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","data":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"PROOF_OF_CONCEPT","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}},{"version":"4.0","source":"CNA","type":"DECLARED","score":"6.9","severity":"MEDIUM","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","data":{"baseScore":6.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","version":"4.0"}},{"version":"3.1","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"3.1","source":"cna@vuldb.com","type":"Secondary","score":"5.3","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"3.1","source":"CNA","type":"DECLARED","score":"5.3","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","data":{"baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","version":"3.1"}},{"version":"3.0","source":"CNA","type":"DECLARED","score":"5.3","severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","data":{"baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","version":"3.0"}},{"version":"2.0","source":"cna@vuldb.com","type":"Secondary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"2.0","source":"CNA","type":"DECLARED","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR","data":{"baseScore":5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR","version":"2.0"}}],"references":[{"url":"https://youtu.be/u_H29UdiPOc","name":"https://youtu.be/u_H29UdiPOc","refsource":"cna@vuldb.com","tags":["Exploit"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://vuldb.com/?submit.707306","name":"https://vuldb.com/?submit.707306","refsource":"cna@vuldb.com","tags":["Third Party Advisory","VDB Entry"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://vuldb.com/?id.338410","name":"https://vuldb.com/?id.338410","refsource":"cna@vuldb.com","tags":["Third Party Advisory","VDB Entry"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://vuldb.com/?ctiid.338410","name":"https://vuldb.com/?ctiid.338410","refsource":"cna@vuldb.com","tags":["Permissions Required","VDB Entry"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.hacklab.eu.org/blogs/zlt_m30s_information_disclosure","name":"https://www.hacklab.eu.org/blogs/zlt_m30s_information_disclosure","refsource":"cna@vuldb.com","tags":["Exploit","Third Party Advisory"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-15082","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15082","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.0","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.1","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.2","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.3","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.4","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.5","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.6","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.7","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.8","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.9","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.10","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.11","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.12","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.13","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.14","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.15","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.16","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.17","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.18","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.19","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.20","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.21","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.22","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.23","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.24","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.25","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.26","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.27","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.28","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.29","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.30","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.31","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.32","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.33","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.34","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.35","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.36","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.37","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.38","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.39","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.40","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.41","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.42","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.43","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.44","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.45","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.46","platforms":[]},{"source":"CNA","vendor":"TOZED","product":"ZLT M30s","version":"affected 1.47","platforms":[]}],"timeline":[{"source":"CNA","time":"2025-12-25T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"source":"CNA","time":"2025-12-25T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"source":"CNA","time":"2025-12-25T10:42:22.000Z","lang":"en","value":"VulDB entry last update"}],"solutions":[],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"S33K3R (VulDB User)","lang":"en"}],"nvd_cpes":[{"cve_year":"2025","cve_id":"15082","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"gztozed","cpe5":"zlt_m30s","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"15082","vulnerable":"1","versionEndIncluding":"1.47","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"gztozed","cpe5":"zlt_m30s_firmware","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2025","cve_id":"15082","cve":"CVE-2025-15082","epss":"0.006960000","percentile":"0.515280000","score_date":"2026-10-07","updated_at":"2026-10-08 00:05:47"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2025-15082","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-12-26T16:37:43.640193Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2025-12-26T16:37:54.066Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"modules":["Web Management Interface"],"product":"ZLT M30s","vendor":"TOZED","versions":[{"status":"affected","version":"1.0"},{"status":"affected","version":"1.1"},{"status":"affected","version":"1.2"},{"status":"affected","version":"1.3"},{"status":"affected","version":"1.4"},{"status":"affected","version":"1.5"},{"status":"affected","version":"1.6"},{"status":"affected","version":"1.7"},{"status":"affected","version":"1.8"},{"status":"affected","version":"1.9"},{"status":"affected","version":"1.10"},{"status":"affected","version":"1.11"},{"status":"affected","version":"1.12"},{"status":"affected","version":"1.13"},{"status":"affected","version":"1.14"},{"status":"affected","version":"1.15"},{"status":"affected","version":"1.16"},{"status":"affected","version":"1.17"},{"status":"affected","version":"1.18"},{"status":"affected","version":"1.19"},{"status":"affected","version":"1.20"},{"status":"affected","version":"1.21"},{"status":"affected","version":"1.22"},{"status":"affected","version":"1.23"},{"status":"affected","version":"1.24"},{"status":"affected","version":"1.25"},{"status":"affected","version":"1.26"},{"status":"affected","version":"1.27"},{"status":"affected","version":"1.28"},{"status":"affected","version":"1.29"},{"status":"affected","version":"1.30"},{"status":"affected","version":"1.31"},{"status":"affected","version":"1.32"},{"status":"affected","version":"1.33"},{"status":"affected","version":"1.34"},{"status":"affected","version":"1.35"},{"status":"affected","version":"1.36"},{"status":"affected","version":"1.37"},{"status":"affected","version":"1.38"},{"status":"affected","version":"1.39"},{"status":"affected","version":"1.40"},{"status":"affected","version":"1.41"},{"status":"affected","version":"1.42"},{"status":"affected","version":"1.43"},{"status":"affected","version":"1.44"},{"status":"affected","version":"1.45"},{"status":"affected","version":"1.46"},{"status":"affected","version":"1.47"}]}],"credits":[{"lang":"en","type":"reporter","value":"S33K3R (VulDB User)"}],"descriptions":[{"lang":"en","value":"A vulnerability was found in TOZED ZLT M30s up to 1.47. Impacted is an unknown function of the file /reqproc/proc_post of the component Web Management Interface. Performing manipulation of the argument goformId results in information disclosure. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."}],"metrics":[{"cvssV4_0":{"baseScore":6.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","version":"4.0"}},{"cvssV3_1":{"baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","version":"3.1"}},{"cvssV3_0":{"baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","version":"3.0"}},{"cvssV2_0":{"baseScore":5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR","version":"2.0"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","description":"Information Disclosure","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-284","description":"Improper Access Controls","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-12-25T17:02:09.345Z","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB"},"references":[{"name":"VDB-338410 | TOZED ZLT M30s Web Management proc_post information disclosure","tags":["vdb-entry","technical-description"],"url":"https://vuldb.com/?id.338410"},{"name":"VDB-338410 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"],"url":"https://vuldb.com/?ctiid.338410"},{"name":"Submit #707306 | ZLT M30s MTNNGRM30S_1.47, M30S_1.47 (other versions might be vulnerable) Improper Access Control - Critical Information Disclosure","tags":["third-party-advisory"],"url":"https://vuldb.com/?submit.707306"},{"tags":["related"],"url":"https://www.hacklab.eu.org/blogs/zlt_m30s_information_disclosure"},{"tags":["exploit","media-coverage"],"url":"https://youtu.be/u_H29UdiPOc"}],"timeline":[{"lang":"en","time":"2025-12-25T00:00:00.000Z","value":"Advisory disclosed"},{"lang":"en","time":"2025-12-25T01:00:00.000Z","value":"VulDB entry created"},{"lang":"en","time":"2025-12-25T10:42:22.000Z","value":"VulDB entry last update"}],"title":"TOZED ZLT M30s Web Management proc_post information disclosure"}},"cveMetadata":{"assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","assignerShortName":"VulDB","cveId":"CVE-2025-15082","datePublished":"2025-12-25T17:02:09.345Z","dateReserved":"2025-12-25T09:36:35.253Z","dateUpdated":"2025-12-26T16:37:54.066Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2025-12-25 17:15:41","lastModifiedDate":"2026-10-07 13:10:00","problem_types":["CWE-200","CWE-284","NVD-CWE-noinfo","CWE-200 Information Disclosure","CWE-284 Improper Access Controls"],"metrics":{"cvssMetricV40":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"PROOF_OF_CONCEPT","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-12-26T16:37:43.640193Z","id":"CVE-2025-15082","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gztozed:zlt_m30s_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.47","matchCriteriaId":"206C4196-AA78-496B-967E-66660AC2E02B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:gztozed:zlt_m30s:-:*:*:*:*:*:*:*","matchCriteriaId":"DCBA4183-9238-4E02-BEDB-FE2927BD77C7"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2025","CveId":"15082","Ordinal":"1","Title":"TOZED ZLT M30s Web Management proc_post information disclosure","CVE":"CVE-2025-15082","Year":"2025"},"notes":[{"CveYear":"2025","CveId":"15082","Ordinal":"1","NoteData":"A vulnerability was found in TOZED ZLT M30s up to 1.47. Impacted is an unknown function of the file /reqproc/proc_post of the component Web Management Interface. Performing manipulation of the argument goformId results in information disclosure. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.","Type":"Description","Title":"TOZED ZLT M30s Web Management proc_post information disclosure"}]}}}