PT-2025-29898

CVE-2025-7729

Publicado

2025-07-17

Atualizado

2025-07-17

Descrição por

CVSS 2.0

5.5

Média

MétricasAV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Scada-LTS versions up to 2.7.8.1

Description A problematic vulnerability exists in Scada-LTS. The issue affects an unknown functionality of the usersProfiles.shtm file. Manipulation of the Username argument leads to cross-site scripting. The attack can be launched remotely. The exploit has been publicly disclosed.

Recommendations Versions prior to 2.8.0 are affected.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Natan Morette

Nmmorette

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-94: Improper Control of Generation of Code (\'Code Injection\')