CVE-2025-2983

CVE-2025-2983 affects Legrand SMS PowerView 1.x. The vulnerability is an OS command injection caused by improper handling of the redirect argument, classified as critical with public exploit disclosure. Multiple sources (NVD, CVE lists, and Red Hat/PT Security entries) confirm the issue and expos...

CVE-2025-2983 Legrand SMS PowerView os command injection

A vulnerability has been found in Legrand SMS PowerView 1.x and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument redirect leads to os command injection. The exploit has been disclosed to the public and may be used. The vendor was...

CVE-2025-2982 Legrand SMS PowerView file inclusion

A vulnerability, which was classified as critical, was found in Legrand SMS PowerView 1.x. Affected is an unknown function. The manipulation of the argument redirect leads to file inclusion. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-2982

The CVE-2025-2982 entry concerns Legrand SMS PowerView 1.x. Affects an unknown function where manipulation of the redirect argument results in file inclusion. The issue is exploitable remotely. Public disclosure is noted. CVSS metrics show a network, low-attack-complexity, low-privilege-requireme...

CVE-2025-2982 Legrand SMS PowerView file inclusion

A vulnerability, which was classified as critical, was found in Legrand SMS PowerView 1.x. Affected is an unknown function. The manipulation of the argument redirect leads to file inclusion. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-2981

A vulnerability, which was classified as problematic, has been found in Legrand SMS PowerView 1.x. This issue affects some unknown processing. The manipulation of the argument redirect leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the publi...

CVE-2025-2980

A vulnerability classified as problematic was found in Legrand SMS PowerView 1.x. This vulnerability affects unknown code. The manipulation of the argument redirect leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vend...

CVE-2025-2981 Legrand SMS PowerView cross site scripting

A vulnerability, which was classified as problematic, has been found in Legrand SMS PowerView 1.x. This issue affects some unknown processing. The manipulation of the argument redirect leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the publi...

CVE-2025-2981

The CVE-2025-2981 entry concerns Legrand SMS PowerView 1.x, where a cross-site scripting vulnerability arises from manipulation of the redirect argument. The issue can be triggered remotely over the network and is tied to insufficient handling of the redirect parameter, allowing injected script t...

CVE-2025-2981 Legrand SMS PowerView cross site scripting

A vulnerability, which was classified as problematic, has been found in Legrand SMS PowerView 1.x. This issue affects some unknown processing. The manipulation of the argument redirect leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the publi...

CVE-2025-2980 Legrand SMS PowerView redirect

A vulnerability classified as problematic was found in Legrand SMS PowerView 1.x. This vulnerability affects unknown code. The manipulation of the argument redirect leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vend...

CVE-2025-2980

The CVE-2025-2980 entry describes a remote open redirect vulnerability in Legrand SMS PowerView 1.x. The issue arises from improper handling of the argument redirect, enabling an attacker to redirect users to a malicious location. Public exploit availability is indicated, and vendors were reporte...

CVE-2025-2980 Legrand SMS PowerView redirect

A vulnerability classified as problematic was found in Legrand SMS PowerView 1.x. This vulnerability affects unknown code. The manipulation of the argument redirect leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vend...

Legrand SMS PowerView 命令注入漏洞

Legrand SMS PowerView is an intelligent power management system from Legrand SMS that allows users to remotely monitor and control power devices via SMS. A command injection vulnerability exists in Legrand SMS PowerView version 1.x. The vulnerability stems from the fact that incorrect operation o...

Legrand SMS PowerView 代码注入漏洞

Legrand SMS PowerView is an intelligent power management system from Legrand SMS that allows users to remotely monitor and control power devices via SMS. A code injection vulnerability exists in Legrand SMS PowerView version 1.x. The vulnerability stems from the fact that incorrect operation of t...

Legrand SMS PowerView 安全漏洞

Legrand SMS PowerView is an intelligent power management system from Legrand SMS that allows users to remotely monitor and control power devices via SMS. A security vulnerability exists in Legrand SMS PowerView version 1.x. The vulnerability stems from the fact that incorrect operation of the...

PT-2025-13671 · Legrand · Legrand Sms Powerview

Name of the Vulnerable Software and Affected Versions: Legrand SMS PowerView versions 1.x Description: A critical issue has been discovered, affecting an unknown functionality. The manipulation of the redirect argument leads to os command injection. The exploit has been publicly disclosed. There ...

Legrand SMS PowerView 安全漏洞

Legrand SMS PowerView is an intelligent power management system from Legrand SMS that allows users to remotely monitor and control power devices via SMS. A security vulnerability exists in Legrand SMS PowerView version 1.x. The vulnerability stems from the fact that incorrect operation of the...

Hacktivist Group Twelve Targets Russian Entities with Destructive Cyber Attacks

A hacktivist group known as Twelve has been observed using an arsenal of publicly available tools to conduct destructive cyber attacks against Russian targets. "Rather than demand a ransom for decrypting data, Twelve prefers to encrypt victims' data and then destroy their infrastructure with a...

BlackCat Operators Distributing Ransomware Disguised as WinSCP via Malvertising

Threat actors associated with the BlackCat ransomware have been observed employing malvertising tricks to distribute rogue installers of the WinSCP file transfer application. "Malicious actors used malvertising to distribute a piece of malware via cloned webpages of legitimate organizations," Tre...