PT-2025-33741 · Scada-Lts · Scada-Lts

Karina Gante

+1

·

CVE-2025-9143

·

Publicado

2025-08-04

·

Atualizado

2025-08-23

CVSS v3.1

5.4

Média

VetorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: Scada-LTS version 2.7.8.1
Description: A security flaw exists in Scada-LTS 2.7.8.1 related to the mailing lists.shtm file. Manipulation of the name/userList/address argument can lead to cross-site scripting. This issue is potentially exploitable remotely, and an exploit has been publicly released.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79CWE-94

Identificadores relacionados

BDU:2025-10886
CVE-2025-9143

Produtos afetados

Scada-Lts