Leica Geosystems AG vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Leica Geosystems AG products: 2 record(s), with severity, exploitation and fixes.

GR10/GR25/GR30/GR50 GNSS 2

Exploited only (KEV) →

CVE-2019-25259 Medium · 5.3 CWE-352 Jan 7, 2026

Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 Cross-Site Request Forgery

Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without request validation. Attackers can trick logged-in users into executing unauthorized actions by crafting malicious web pages that submit requests to the application.

CVE-2018-25131 High · 7.2 CWE-79 Dec 24, 2025

Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 Stored XSS via Config Upload

Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 contains a stored cross-site scripting vulnerability in the configuration file upload functionality. Attackers can upload a malicious HTML file to that executes arbitrary JavaScript in a user's browser session when viewed.