CVE-2019-25244CWE-79

Legrand BTicino Driver Manager F454 1.0.51 CSRF and Stored XSS Vulnerabilities

Medium · published December 24, 2025

CVSS v4.0
5.1
EPSS
0%
Percentile
16.4
In the wild
Unconfirmed
What it is

Legrand BTicino Driver Manager F454 1.0.51 contains multiple web vulnerabilities that allow attackers to perform administrative actions without proper request validation. Attackers can exploit cross-site request forgery to change passwords and inject stored cross-site scripting payloads through unvalidated GET parameters.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
EPSS
0.00257 · 16.4th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-12-24T19:27Z
EPSS history
Timeline
  • 24 DEC 19:27Z
    Legrand BTicino Driver Manager F454 1.0.51 CSRF and Stored XSS Vulnerabilities
    cvelistv5