CVE-2025-2072

Name of the Vulnerable Software and Affected Versions FAST LTA Silent Brick WebUI versions prior to 2.63.04

Description A Reflected Cross-Site Scripting (XSS) issue has been discovered, allowing attackers to inject malicious JavaScript code into web pages viewed by users. This occurs when user-supplied input is improperly handled and reflected directly in the output of a web page without proper sanitization or encoding. Exploiting this issue, an attacker can execute arbitrary JavaScript in the context of the victim's browser, potentially leading to session hijacking, data theft, and other malicious actions. Affected WebUI parameters are h, hd, p, pi, s, t, x, y.

Recommendations For versions prior to 2.63.04, update to version 2.63.04 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected parameters h, hd, p, pi, s, t, x, y in the WebUI until a patch is applied.