PT-2025-13667
CVE-2025-2980
·
Published
2025-03-31
·
Updated
2025-03-31
Description by
CVSS 2.0
4.0
MediumMetricsAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Legrand SMS PowerView versions 1.x
Description
A problematic vulnerability was found in the software, affecting unknown code. The manipulation of the
redirect argument leads to an open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public.Recommendations
For Legrand SMS PowerView versions 1.x, as a temporary workaround, consider restricting access to the
redirect argument to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾