Skip to main content

CISA issues alert on vulnerabilities in Zenitel TCIV-3+ devices

Source Decision Insights Threat Desk Published November 25, 2025 Companies 1
Human View Machine View

304th article in the last 90 days, one of 411 articles referencing Cybersecurity and Infrastructure Security Agency (CISA). Previous coverage: CISA issues alert on SiRcom SMART Alert authentication bypass vulnerability (Nov 2025).

Companies mentioned

Best suited for

Persona
Security Operations Leader
Decision stage
Which to buy
Adoption curve
Early Majority
Industry
Industrials / Capital Goods / Electrical Equipment

Our classification, not the publisher's statement. Best suited for, not only for.

Zenitel's TCIV-3+ equipment contains vulnerabilities including Operating System (OS) command injection, out-of-bounds write, and Cross-Site Scripting (XSS), which can lead to unauthorized code execution or service disruption.

All versions of TCIV-3+ prior to 9.3.3.0 are affected by these issues. Three distinct OS command injection vulnerabilities have been identified, each assigned Common Vulnerabilities and Exposures (CVE) identifiers CVE-2025-64126, CVE-2025-64127, and CVE-2025-64128, respectively. Each has a Common Vulnerability Scoring System (CVSS) v3 base score of 9.8 and a CVSS v4 base score of 10.0. The vulnerabilities arise from inadequate input validation and sanitization across different application parameters, allowing unauthenticated remote attackers to execute arbitrary commands. Additionally, an out-of-bounds write vulnerability (CVE-2025-64129) with a CVSS v3 score of 7.6 and CVSS v4 score of 7.0 can lead to device crashes. A reflected XSS vulnerability (CVE-2025-64130) with a CVSS v3 score of 9.8 and CVSS v4 score of 9.3 permits remote attackers to run arbitrary JavaScript in victims' browsers.

Exploitation of these flaws could result in arbitrary code execution or Denial of Service (DoS) conditions affecting the TCIV-3+ devices.

Zenitel advises upgrading affected devices to firmware version 9.3.3.0 or later to address these security issues. No public reports of exploit activity targeting these vulnerabilities have been indicated.

Measures to reduce exposure include limiting network accessibility of control system devices, placing these systems behind firewalls, isolating them from business networks, and employing secure remote access technologies such as up-to-date virtual private networks. Organizations should conduct risk assessments before implementing defensive controls. Additional best practices and recommendations related to industrial control system security are available through relevant cybersecurity resources. Incidents of suspicious activity should be reported according to organizational procedures for further analysis and information sharing.

Blog post, originally published by CISA at cisa.gov.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/cisa-issues-alert-on-vulnerabilities-in-zenitel-tciv-3-devices/",
        "name": "CISA issues alert on vulnerabilities in Zenitel TCIV-3+ devices",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/cisa-issues-alert-on-vulnerabilities-in-zenitel-tciv-3-devices/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@type": "Organization",
      "name": "Zenitel"
    },
    "articleSection": [
      "Cybersecurity",
      "AI infrastructure"
    ],
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Operations Leader"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Majority"
      },
      {
        "@type": "Audience",
        "additionalType": "Industry",
        "audienceType": "Industrials / Capital Goods / Electrical Equipment"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
      "@type": "Person",
      "name": "Decision Insights Threat Desk",
      "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
    },
    "dateModified": "2026-08-23T13:18:57-06:00",
    "datePublished": "2025-11-25T13:17:11-07:00",
    "description": "CISA reports multiple vulnerabilities in Zenitel TCIV-3+ firmware versions before 9.3.3.0, including OS command injection and cross-site scripting.",
    "headline": "CISA issues alert on vulnerabilities in Zenitel TCIV-3+ devices",
    "isBasedOn": {
      "@type": "CreativeWork",
      "author": {
        "@type": "Person",
        "name": "CISA"
      },
      "sourceOrganization": {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
        "name": "Department of Homeland Security"
      },
      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-03"
    },
    "keywords": [
      "Common Vulnerabilities and Exposures",
      "Common Vulnerability Scoring System",
      "Cross-Site Scripting",
      "Denial of Service",
      "Operating System",
      "Vulnerabilities"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/cisa-issues-alert-on-vulnerabilities-in-zenitel-tciv-3-devices/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
        "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
    "@type": "Person",
    "description": "CISA advisories, vendor security bulletins, and CVE disclosures, summarized into sourced briefs. Produced under our Standards & Methodology.",
    "name": "Decision Insights Threat Desk",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
  }
]

Is this your company? Get structured data for your own pages