CVE-2025-54983 - CVE House
Back to Database
Status published Medium CVE-2025-54983

Health check port on ZCC allows tunnel bypass

Vulnerability Description

A health check port on Zscaler Client Connector on Windows, versions 4.6 < 4.6.0.216 and 4.7 < 4.7.0.47, which under specific circumstances was not released after use, allowed traffic to potentially bypass ZCC forwarding controls.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-54983

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • DTCC Team

References

More from Zscaler

View All →
CVE-2025-54982
SAML 2.0 Public Key Validation Issue
Critical 9.6
CVE-2024-31127
MacOS Zscaler Client Connector Local Privilege Escalation
High 7.3
CVE-2024-23483
Local Privilege Escalation via lack of input validation
High 7
CVE-2024-23482
ZScalerService Local Privilege Escalation
High 7
CVE-2024-23480
Insecure MacOS code sign check fallback
High 7.5

Affected Vendor

Affected Software

Zscaler Client Connector
Vulnerable Versions:
4.6, 4.7

Timeline

Official Publish: November 12th, 2025
Last Modified: November 12th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Weaknesses (CWE)

CWE-772

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.