Vulnerabilidades de Scada-lts
CVEs publicadas que afetam produtos de Scada-lts: 2 registro(s), com severidade, exploração e correções.
CVE-2025-13791
Média · 6.5
CWE-22 30/11/2025
Scada-LTS Project Import ZIPProjectManager.java Common.getHomeDir path traversal
A vulnerability was identified in Scada-LTS up to 2.7.8.1. Affected is the function Common.getHomeDir of the file br/org/scadabr/vo/exporter/ZIPProjectManager.java of the component Project Import. Such manipulation leads to path traversal. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2025-13790
Alta · 8.8
CWE-352 30/11/2025
Scada-LTS cross-site request forgery
A vulnerability was determined in Scada-LTS up to 2.7.8.1. This impacts an unknown function. This manipulation causes cross-site request forgery. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.