Resource exhaustion in Ziv Idf And Zlf
CVE-2025-41361
Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. The devices improperly handle TLS requests associated with PROCOME sockets, so TLS requests sent to those PROCOME ports could cause the device to reboot and result in a denial of service. To exploit this vulnerability, PROCOME ports must be configured and active, with communications encryption active.
Vulnerability class: DoS (Denial of Service)
EPSS: 0.002 (11.8th percentile) — read the EPSS interpretation.
Affected products
- Ziv Idf And Zlf — versions 0