Threats Tagged 'cve-2025-12899'
View all threats tagged with 'cve-2025-12899'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-12899'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2025-12899 is a medium-severity vulnerability in the Zephyr RTOS network stack where an IPv4 packet with ICMP type 128 is incorrectly treated as an ICMPv6 Echo Request. This type confusion leads to an out-of-bounds memory read, potentially leaking sensitive information. The flaw requires no authentication or user interaction and can be exploited remotely over the network. Although no known exploits are currently in the wild, the vulnerability impacts all versions of Zephyr. European organizations using Zephyr in IoT or embedded devices could face confidentiality and availability risks. Mitigation involves applying vendor patches once available and implementing network-level filtering to block malformed ICMP packets. Countries with significant IoT deployments and industrial automation sectors, such as Germany, France, and the UK, are most likely to be affected. Due to the moderate impact and ease of exploitation, the severity is assessed as medium. Defenders should prioritize monitoring network traffic for anomalous ICMP packets and update Zephyr firmware promptly. Join the discussion | CVE Database V5 | 01/30/2026, 05:34:19 UTC Added: 01/30/2026, 05:42:47 UTC |
Showing 1 to 1 of 1 result