CVE-2025-2980

LowCVSS 3.5/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic was found in Legrand SMS PowerView 1.x. This vulnerability affects unknown code. The manipulation of the argument redirect leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 3.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-601

Affected software

No affected versions have been published.

Timeline

Published
Mar 31, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-298007.8Improper privilege management in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.CVE-2025-298017.8Incorrect default permissions in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.CVE-2025-298027.3Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.CVE-2025-298037.3Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to eCVE-2025-298047.3Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.CVE-2025-298057.5Exposure of sensitive information to an unauthorized actor in Outlook for Android allows an unauthorized attacker to disclose information ovCVE-2025-298066.5No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.CVE-2025-298078.8Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network.CVE-2025-298085.5Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose infCVE-2025-298097.1Insecure storage of sensitive information in Windows Kerberos allows an authorized attacker to bypass a security feature locally.CVE-2025-29813.5A vulnerability, which was classified as problematic, has been found in Legrand SMS PowerView 1.x. This issue affects some unknown processinCVE-2025-298107.5Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.
CVE-2025-2980: Low severity, CVSS 3.5 | Vulnix