Cyber Resilience

CVE-2025-5105

Published
23 May 2025
Modified
17 June 2026
CVSS Score v4 6.9
Click a component to see what it means
Raw vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0039 32th percentile
Risk Priority 41 floored blend · peak EPSS

Summary

CVE-2025-5105 is a medium-severity Heap Inspection (CWE-244) vulnerability. Its CVSS base score is 6.9 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique OS Credential Dumping (T1003); ranked at the 32th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to SC-4 (Information in Shared System Resources) — see the control section below for these in your framework.

EU & UK References

Vulnerability Data

A vulnerability was found in TOZED ZLT W51 up to 1.4.2 and classified as critical. Affected by this issue is some unknown functionality of the component Service Port 7777. The manipulation leads to improper clearing of heap memory before release.…

more

The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CWE(s)
CWE-244

Related Threats

MITRE ATT&CK Enterprise Techniques

T1003 OS Credential Dumping Credential Access
Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password.
attack.mitre.org →
T1552 Unsecured Credentials Credential Access
Adversaries may search compromised systems to find and obtain insecurely stored credentials.
attack.mitre.org →
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2025-45663Shared CWE-244
CVE-2025-1722Shared CWE-244
CVE-2025-36083Shared CWE-244
CVE-2023-20070Shared CWE-244
CVE-2025-1721Shared CWE-244
CVE-2026-20039Shared CWE-244
CVE-2025-26304Shared CWE-244
CVE-2023-20031Shared CWE-244
CVE-2025-26305Shared CWE-244
CVE-2025-36118Shared CWE-244

Affected Assets

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

SC-4 Information in Shared System Resources good match

SC-4 requires mechanisms that stop unintended transfer of sensitive data through shared resources such as heap memory reused after realloc.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.DS-10 mostly match
prevents

Explicit example of removing confidential data from process memory directly prevents heap inspection exposure.

PR.PS-06 partial match
prevents

Secure SDLC practices encompass proper sensitive-memory handling but fixing this single CWE does not achieve the control.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.8.10 Information deletion partial match
prevents

Explicitly requires secure deletion of sensitive data, directly addressing improper heap clearing.

A.8.25 Secure development life cycle partial match
prevents

Secure SDLC processes can incorporate memory-safety requirements but do not specifically mandate heap clearing.

A.8.28 Secure coding partial match
prevents

Mandates secure coding practices that include proper memory sanitization before release.

A.8.27 Secure system architecture and engineering principles none match
none

Secure architecture principles may reduce exposure but do not prescribe explicit heap-clearing techniques.

References