CVE-2025-15083
Low · 2.0CVSS
2.0
EPSS
0.3%
Published
Dec 25, 2025
CISA due date
—
The record
A vulnerability was determined in TOZED ZLT M30s up to 1.47. The affected element is an unknown function of the component UART Interface. Executing manipulation can lead to on-chip debug and test interface with improper access control. The physical device can be targeted for the attack. Attacks of this nature are highly complex. The exploitability is described as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-15203 Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP… CWE-1191
- CVE-2026-8988 Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface… CWE-1191
- CVE-2026-8989 Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the… CWE-1191
- CVE-2025-52533 Improper Access Control in an on-chip debug interface could allow a privileged attacker… CWE-1191
- CVE-2024-36319 Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a… CWE-1191
- CVE-2025-36755 The CleverDisplay BlueOne hardware player is designed with its USB interfaces physically… CWE-1191