CVE-2021-25910: Zivautomation 4cct-EA6-334126bf Firmware

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Authentication vulnerability in the cookie parameter of ZIV AUTOMATION 4CCT-EA6-334126BF allows a local attacker to perform modifications in several parameters of the affected device as an authenticated user.

Affected products

• Zivautomation 4cct-EA6-334126bf Firmware: version 3.23.77.8.33251 only

Published 2021-01-29. Last modified 2026-06-17.