Riskcovery

CVE-2025-15083

TOZED ZLT M30s UART on-chip debug and test interface with improper access control

State
Published
Severity
1.0 Low
Published
Dec 25, 2025
Updated
Dec 30, 2025
Reserved
Dec 25, 2025

Read the record on cve.org

Description

A vulnerability was determined in TOZED ZLT M30s up to 1.47. The affected element is an unknown function of the component UART Interface. Executing manipulation can lead to on-chip debug and test interface with improper access control. The physical device can be targeted for the attack. Attacks of this nature are highly complex. The exploitability is described as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Scores

CVSSScoreVectorSource
4.01.0 LowCVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:PVulDB
3.12.0 LowCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:RVulDB
3.02.0 LowCVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:RVulDB
2.01.2 LowAV:L/AC:H/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:URVulDB

Weaknesses

  • CWE-1191 On-Chip Debug and Test Interface With Improper Access Control

Affected Products

ProductVersions
ZLT M30sTOZED
  • 1.0Affected
  • 1.1Affected
  • 1.2Affected
  • 1.3Affected
  • 1.4Affected
  • 1.5Affected
  • 1.6Affected
  • 1.7Affected
  • 1.8Affected
  • 1.9Affected
  • 1.10Affected
  • 1.11Affected
  • 1.12Affected
  • 1.13Affected
  • 1.14Affected
  • 1.15Affected
  • 1.16Affected
  • 1.17Affected
  • 1.18Affected
  • 1.19Affected
  • 1.20Affected
  • 1.21Affected
  • 1.22Affected
  • 1.23Affected
  • 1.24Affected
  • and 23 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.