PT-2026-1672 · Leica Geosystems · Leica Geosystems Gr10+3

CVE-2019-25259 · Publicado 2026-01-07 · Atualizado 2026-01-08

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Leica Geosystems GR10/GR25/GR30/GR50 GNSS version 4.30.063

Description The software contains a cross-site request forgery issue that could allow attackers to perform administrative actions without proper validation of requests. Attackers can potentially trick authenticated users into unintentionally executing unauthorized actions through malicious web pages that submit requests to the application.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2019-25259

Produtos afetados

Leica Geosystems Gr10

Leica Geosystems Gr25

Leica Geosystems Gr30

Leica Geosystems Gr50

Referências · 8

• 🔥 https://packetstormsecurity.com/files/151040 · Exploit
• 🔥 https://exploit-db.com/exploits/46090 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/155275 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25259 · Nota de Segurança
• https://leica-geosystems.com/en-us · Nota
• https://t.me/CVEtracker/41640 · Publicação no Telegram
• https://zeroscience.mk/en/vulnerabilities/ZSL-2019-5502.php · Nota
• https://t.me/cveNotify/148019 · Publicação no Telegram