PT-2025-13671 · Legrand · Legrand Sms Powerview

Published 2025-03-31 · Updated 2025-04-02 · CVE-2025-2983

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Medium

Base vector

AV:A/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Legrand SMS PowerView versions 1.x

Description A critical issue has been discovered, affecting an unknown functionality. The manipulation of the redirect argument leads to os command injection. The exploit has been publicly disclosed. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations For Legrand SMS PowerView versions 1.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the redirect argument to minimize the risk of exploitation.

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

CVE-2025-2983

Affected Products

Legrand Sms Powerview

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-2983 · Security Note
• https://vuldb.com/?ctiid.302035 · Note
• https://twitter.com/CVEnew/status/1906623063539757287 · Twitter Post
• https://t.me/cvedetector/21562 · Telegram Post
• https://t.me/cvenotify/116986 · Telegram Post
• https://twitter.com/SecAideInfo/status/1907376141087728080 · Twitter Post
• https://vuldb.com/?id.302035 · Note
• https://t.me/cvetracker/20324 · Telegram Post