PT-2025-53352 · Leica Geosystems · Leica Geosystems Gr10+3

Published 2025-12-24 · Updated 2025-12-24 · CVE-2018-25131

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Leica Geosystems GR10/GR25/GR30/GR50 GNSS version 4.30.063

Description The software contains a stored cross-site scripting issue in the configuration file upload functionality. An attacker can upload a malicious HTML file that will execute arbitrary JavaScript in a user’s browser session when viewed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-25131

Affected Products

Leica Geosystems Gr10

Leica Geosystems Gr25

Leica Geosystems Gr30

Leica Geosystems Gr50

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-25131 · Security Note
• https://zeroscience.mk/en/vulnerabilities/ZSL-2019-5503.php · Note
• https://exploit-db.com/exploits/46091 · Note
• https://t.me/cveNotify/146803 · Telegram Post
• https://leica-geosystems.com · Note