Vulnerability · Published Mar 31, 2025 · Assigned by VulDB
CVE-2025-2980Legrand SMS PowerView redirect
Low 3.5
In plain English
A low-severity open redirect in SMS PowerView from Legrand. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).
Severity (CVSS 3.1)3.5Low
Exploit odds (30 days)0.3%top 80.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability classified as problematic was found in Legrand SMS PowerView 1.x. This vulnerability affects unknown code. The manipulation of the argument redirect leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Legrand | SMS PowerView | 1.x |
Weakness: CWE-601 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
References
- VDB-302032 | Legrand SMS PowerView redirect vdb-entry, technical-description
- VDB-302032 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #523212 | Legrand SMS Power View 1.x.x OS Command Injection third-party-advisory