CVE-2025-13791
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
A vulnerability was identified in Scada-LTS up to 2.7.8.1. Affected is the function Common.getHomeDir of the file br/org/scadabr/vo/exporter/ZIPProjectManager.java of the component Project Import. Such manipulation leads to path traversal. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Risk Assessment
An attacker can remotely read or write files outside the allowed directory, potentially leading to disclosure of sensitive data or placement of malicious files.
Recommendation
Apply available patches or restrict access to the project import functionality. If the vendor does not release a patch, consider disabling this function or implementing path validation.
Other vulnerabilities in Scada-LTS
See all- CVE-2025-13790Medium
A vulnerability was determined in Scada-LTS up to 2.7.8.1. An unknown function is vulnerable to Cross-Site Request Forgery (CSRF). The attack may be initiated remotely, and the exploit has been publicly disclosed.
- CVE-2025-10235Low
A cross-site scripting (XSS) vulnerability was found in Scada-LTS up to version 2.7.8.1 in the /reports.shtm file of the Reports Module component. Manipulating the Colour argument leads to malicious script execution. The exploit has been publicly disclosed, and the vendor did not respond to the report.
- CVE-2025-10234Low
A cross-site scripting (XSS) vulnerability was detected in Scada-LTS up to version 2.7.8.1 in the /data_point_edit.shtm file of the Data Point Edit Module component. Manipulating the Text Renderer properties leads to malicious script execution. The exploit has been publicly disclosed, and the vendor did not respond to the report.
Original NVD description (English source)
A vulnerability was identified in Scada-LTS up to 2.7.8.1. Affected is the function Common.getHomeDir of the file br/org/scadabr/vo/exporter/ZIPProjectManager.java of the component Project Import. Such manipulation leads to path traversal. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS