CVE-2025-2983

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A vulnerability has been found in Legrand SMS PowerView 1.x and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument redirect leads to os command injection. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-77CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Mar 31, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-298306.5Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information ovCVE-2025-298317.5Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.CVE-2025-298326.5Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a networCVE-2025-298337.7Time-of-check time-of-use (toctou) race condition in Windows Virtual Machine Bus allows an unauthorized attacker to execute code locally.CVE-2025-298347.5Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.CVE-2025-298356.5Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a networCVE-2025-298366.5Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a networCVE-2025-298375.5Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to disclose information loCVE-2025-298387.0Null pointer dereference in Windows Drivers allows an unauthorized attacker to elevate privileges locally.CVE-2025-298394.0Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information locally.CVE-2025-29848.8A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. Affected by this issue is some unknown CVE-2025-298408.8Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
CVE-2025-2983: Medium severity, CVSS 5.5 | Vulnix