PT-2025-34077 · Scada-Lts · Scada-Lts

Marceloqz · Published 2025-08-20 · Updated 2025-08-21 · CVE-2025-9233

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Scada-LTS versions through 2.7.8.1

Description: A security vulnerability has been detected in Scada-LTS. The manipulation of the argument Name in an unknown function of the file view edit.shtm leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

Recommendations: Versions prior to 2.7.8.1 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

XSS

Weakness Enumeration

CWE-94

CWE-79

Related Identifiers

BDU:2025-12389

CVE-2025-9233

Affected Products

Scada-Lts

References · 11

• 🔥 https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/CVE-2025-9233.md · Exploit
• 🔥 https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/Stored%20XSS%20endpoint%20view_edit.shtm%20parameter%20name.md#poc · Exploit
• 🔥 https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/Stored%20XSS%20endpoint%20view_edit.shtm%20parameter%20name.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-9233 · Security Note
• https://osv.dev/vulnerability/CVE-2025-9233 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-12389 · Security Note
• https://vuldb.com/?submit.631118 · Note
• https://vuldb.com/?ctiid.320766 · Note
• https://twitter.com/CVEnew/status/1958397822912323657 · Twitter Post
• https://t.me/cveNotify/132921 · Telegram Post
• https://vuldb.com/?id.320766 · Note