{"id":"CVE-2025-2983","state":"PUBLISHED","title":"Legrand SMS PowerView os command injection","description":"A vulnerability has been found in Legrand SMS PowerView 1.x and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument redirect leads to os command injection. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","publishedAt":"2025-03-31T08:00:08.861Z","updatedAt":"2025-03-31T12:38:50.834Z","severity":{"score":5.1,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","source":"VulDB"},"assigner":"VulDB","products":["Legrand SMS PowerView"],"affected":[{"vendor":"Legrand","product":"SMS PowerView","versions":[{"version":"1.x","status":"affected"}]}],"references":["https://vuldb.com/?id.302035","https://vuldb.com/?ctiid.302035"],"weaknesses":["CWE-78","CWE-77"],"ingestedAt":"2026-10-29T20:08:55.257Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/2xxx/CVE-2025-2983.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-2983","state":"PUBLISHED","datePublished":"2025-03-31T08:00:08.861Z","dateUpdated":"2025-03-31T12:38:50.834Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2025-03-30T07:58:32.953Z"},"containers":{"cna":{"title":"Legrand SMS PowerView os command injection","descriptions":[{"lang":"en","value":"A vulnerability has been found in Legrand SMS PowerView 1.x and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument redirect leads to os command injection. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."},{"lang":"de","value":"In Legrand SMS PowerView 1.x wurde eine Schwachstelle gefunden. Sie wurde als kritisch eingestuft. Es geht um eine nicht näher bekannte Funktion. Durch Manipulieren des Arguments redirect mit unbekannten Daten kann eine os command injection-Schwachstelle ausgenutzt werden. Der Exploit steht zur öffentlichen Verfügung."}],"affected":[{"vendor":"Legrand","product":"SMS PowerView","versions":[{"version":"1.x","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.302035","name":"VDB-302035 | Legrand SMS PowerView os command injection","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.302035","name":"VDB-302035 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.1,"vectorString":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":5.5,"vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":5.5,"vectorString":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":5.2,"vectorString":"AV:A/AC:L/Au:S/C:P/I:P/A:P"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","type":"CWE","lang":"en","description":"OS Command Injection"}]},{"descriptions":[{"cweId":"CWE-77","type":"CWE","lang":"en","description":"Command Injection"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2025-03-31T08:00:08.861Z"},"timeline":[{"time":"2025-03-30T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2025-03-30T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2025-03-30T10:03:45.000Z","lang":"en","value":"VulDB entry last update"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-03-31T12:38:31.738934Z","id":"CVE-2025-2983","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-31T12:38:50.834Z"}}]}}}