CVE-2025-41363 - CVE House
Back to Database
Status published Medium CVE-2025-41363

CORS vulnerability in IDF and ZLF

Vulnerability Description

In IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04, a configuration error has been detected in cross-origin resource sharing (CORS). Exploiting this vulnerability requires authenticating to the device and executing certain commands that can be executed with view permission.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-41363

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Aarón Flecha Menéndez
  • Gabriel Vía Echezarreta

References

More from ZIV

View All →
CVE-2025-41367
Stored Cross-Site Scripting (XSS) vulnerability in IDF and ZLF
Medium 4.8
CVE-2025-41366
CORS vulnerability in IDF and ZLF
Medium 5.1
CVE-2025-41365
Code injection vulnerability in IDF and ZLF
Medium 5.1
CVE-2025-41364
Stored Cross-Site Scripting (XSS) vulnerability in IDF and ZLF
Medium 5.1
CVE-2025-41362
Code injection vulnerability in IDF and ZLF
Medium 5.3

Affected Vendor

Affected Software

IDF and ZLF
Vulnerable Versions:
0

Timeline

Official Publish: June 6th, 2025
Last Modified: June 6th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-942

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.