Approved changes feed: RSS · Atom

cpe:2.3:a:legrand:sms_powerview:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLegrand (e6c4cc21-8268-5b3d-a360-545f3d41c696)
ProductSms Powerview (456f277a-9be4-5508-a306-a7260bad6a21)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2983 vulnerable 2026-06-08 07:16:58.776222 Legrand SMS PowerView os command injection
MEDIUM (5.5)
A vulnerability has been found in Legrand SMS PowerView 1.x and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument redirect leads to os command injection. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-03-31T08:00:08.861Z
Updated: 2025-03-31T12:38:50.834Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2982 vulnerable 2026-06-08 07:16:58.775852 Legrand SMS PowerView file inclusion
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in Legrand SMS PowerView 1.x. Affected is an unknown function. The manipulation of the argument redirect leads to file inclusion. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-03-31T07:31:04.028Z
Updated: 2025-03-31T12:39:27.578Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2981 vulnerable 2026-06-08 07:16:58.775423 Legrand SMS PowerView cross site scripting
LOW (3.5)
A vulnerability, which was classified as problematic, has been found in Legrand SMS PowerView 1.x. This issue affects some unknown processing. The manipulation of the argument redirect leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-03-31T07:00:10.188Z
Updated: 2025-03-31T12:40:24.332Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2980 vulnerable 2026-06-08 07:16:58.775014 Legrand SMS PowerView redirect
LOW (3.5)
A vulnerability classified as problematic was found in Legrand SMS PowerView 1.x. This vulnerability affects unknown code. The manipulation of the argument redirect leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-03-31T06:31:03.825Z
Updated: 2025-03-31T12:48:54.262Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.