PT-2025-53346 · Riello · Riello Ups Netman 208 Application

Published 2025-12-24 · Updated 2026-01-02 · CVE-2025-68915

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Riello UPS NetMan 208 Application versions prior to 1.12

Description The Riello UPS NetMan 208 Application, before version 1.12, contains a cross-site scripting (XSS) issue in the cgi-bin/loginbanner w.cgi component. This allows for the injection of malicious scripts through a crafted banner. The vulnerable component is the cgi-bin/loginbanner w.cgi script, and the vulnerable parameter is the banner content.

Recommendations Update the Riello UPS NetMan 208 Application to version 1.12 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-68915

Affected Products

Riello Ups Netman 208 Application

References · 10

• 🔥 https://github.com/gerico-lab/riello-multiple-vulnerabilities-2025 · Exploit
• https://osv.dev/vulnerability/CVE-2025-68915 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68915 · Security Note
• https://twitter.com/VulmonFeeds/status/2004028247906951419 · Twitter Post
• https://twitter.com/transilienceai/status/2004032211985879424 · Twitter Post
• https://twitter.com/transilienceai/status/2004032217346199723 · Twitter Post
• https://t.me/CVEtracker/40638 · Telegram Post
• https://twitter.com/CVEnew/status/2003932242003857871 · Twitter Post
• https://t.me/cveNotify/147573 · Telegram Post
• https://twitter.com/transilienceai/status/2004032213508411509 · Twitter Post