PT-2025-48393 · Scada-Lts · Scada-Lts

Sh7Err02 + 1 · Publicado 2025-11-30 · Atualizado 2025-11-30 · CVE-2025-13790

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Scada-LTS versions up to 2.7.8.1

Description A cross-site request forgery condition exists in Scada-LTS. This impacts an unknown function and can be initiated remotely. The exploit has been publicly disclosed. The vendor was contacted regarding this disclosure but did not respond.

Recommendations Versions prior to 2.7.8.1 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Missing Authorization

Enumeração de Fraquezas

CWE-352

CWE-862

Identificadores relacionados

BDU:2026-02082

CVE-2025-13790

Produtos afetados

Scada-Lts

Referências · 12

• 🔥 https://github.com/Xzzz111/exps/blob/main/archives/Scada-LTS-CSRF-1/report.md#proof-of-concept · Exploit
• 🔥 https://github.com/Xzzz111/exps/blob/main/archives/Scada-LTS-CSRF-1/report.md · Exploit
• https://twitter.com/VulmonFeeds/status/1995181946591236274 · Publicação no Twitter
• https://vuldb.com/?submit.690871 · Nota
• https://t.me/cveNotify/144347 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-13790 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1995143412719481076 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-13790 · Nota de Segurança
• https://bdu.fstec.ru/vul/2026-02082 · Nota de Segurança
• https://vuldb.com/?id.333794 · Nota
• https://t.me/CVEtracker/38489 · Publicação no Telegram
• https://vuldb.com/?ctiid.333794 · Nota