CVE-2025-5105 TOZED ZLT W51 Service Port 7777 heap inspection
Remote attackers can inspect heap memory on the TOZED ZLT W51 service port, potentially exposing sensitive data due to improper memory clearing.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-5105?
CVE-2025-5105 is a medium-severity vulnerability in TOZED ZLT W51, published on 23 May 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability was found in TOZED ZLT W51 up to 1.4.2 and classified as critical. Affected by this issue is some unknown functionality of the component Service Port 7777. The manipulation leads to improper clearing of heap memory before release. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Weakness: CWE-244
Which versions are affected by CVE-2025-5105?
How do I fix CVE-2025-5105?
No fix has been published for CVE-2025-5105 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-5105 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-5105 exists.
Sources
Also known as GHSA-69rc-cf64-54v3.