TOZED ZLT M30s up to 1.47 UART Interface on-chip debug and test interface with improper access control

Summaryinfo

A vulnerability has been found in TOZED ZLT M30s up to 1.47 and classified as problematic. The impacted element is an unknown function of the component UART Interface. The manipulation leads to on-chip debug and test interface with improper access control. This vulnerability is documented as CVE-2025-15083. It is possible to launch the attack on the physical device. Additionally, an exploit exists. The vendor was contacted early about this disclosure but did not respond in any way.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in TOZED ZLT M30s up to 1.47. This issue affects an unknown part of the component UART Interface. The manipulation with an unknown input leads to a on-chip debug and test interface with improper access control vulnerability. Using CWE to declare the problem leads to CWE-1191. The chip does not implement or does not correctly perform access control to check whether users are authorized to access internal registers and test modes through the physical debug/test interface. Impacted is confidentiality.

It is possible to read the advisory at hacklab.eu.org. The identification of this vulnerability is CVE-2025-15083. The exploitation is known to be difficult. Attacking locally is a requirement. No form of authentication is needed for a successful exploitation. Technical details are unknown but a public exploit is available.

The exploit is available at hacklab.eu.org. It is declared as proof-of-concept. The vendor was contacted early about this disclosure but did not respond in any way.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-205381). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• TOZED

Name

• ZLT M30s

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21
• 1.22
• 1.23
• 1.24
• 1.25
• 1.26
• 1.27
• 1.28
• 1.29
• 1.30
• 1.31
• 1.32
• 1.33
• 1.34
• 1.35
• 1.36
• 1.37
• 1.38
• 1.39
• 1.40
• 1.41
• 1.42
• 1.43
• 1.44
• 1.45
• 1.46
• 1.47

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #707974: TOZED ZLT M30s 1.47 Improper Access Control in Debug Interface (by S33K3R)

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion