PT-2025-33722
CVE-2025-9137
·
Published
2025-07-22
·
Updated
2025-08-26
Description by
CVSS 3.1
4.8
MediumMetricsAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Scada-LTS version 2.7.8.1
Description:
A cross-site scripting issue exists due to manipulation of the
alias argument within the scheduled events.shtm file. The attack can be executed remotely. The vendor states that exploitation likely requires administrative permissions and that the system's design does not prevent administrative users from injecting malicious code.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾