CVE-2025-2597: Reflected Cross-Site Scripting (XSS) vulnerability in ITIUM 6050
First published: Fri Mar 21 2025(Updated: )
Reflected Cross-Site Scripting (XSS) in ITIUM 6050 version 5.5.5.2-b3526 from Impact Technologies. This vulnerability could allow an attacker to execute malicious Javascript code via GET and POST requests to the ‘/index.php’ endpoint and injecting code into the ‘id_session.
Credit: cve-coordination@incibe.es
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ITIUM 6050 | ||
| All of | ||
| Itechno Itium 6050 Firmware | =5.5.5.2-b3526 | |
| Itechno Itium 6050 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-2597?
CVE-2025-2597 is rated as a medium severity vulnerability due to its potential to enable reflected cross-site scripting attacks.
How do I fix CVE-2025-2597?
Fixing CVE-2025-2597 involves validating and sanitizing user input on the affected '/index.php' endpoint.
What type of vulnerability is CVE-2025-2597?
CVE-2025-2597 is a reflected cross-site scripting (XSS) vulnerability.
Which software is affected by CVE-2025-2597?
CVE-2025-2597 affects ITIUM 6050 version 5.5.5.2-b3526 from Impact Technologies.
Can CVE-2025-2597 be exploited remotely?
Yes, CVE-2025-2597 can be exploited remotely through crafted GET and POST requests.
- agent/references
- agent/weakness
- agent/first-publish-date
- agent/type
- agent/title
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/author
- agent/event
- agent/source
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- vendor/impact technologies
- canonical/itium 6050
- vendor/itechno
- canonical/itechno itium 6050 firmware
- version/itechno itium 6050 firmware/5.5.5.2-b3526
- canonical/itechno itium 6050