MEDIUM
Legrand BTicino Driver Manager F454 1.0.51 CSRF and Stored XSS Vulnerabilities
Published Dec 24, 2025
5.1
MEDIUMCVSS 4.0
EPSS 0.26%
Description
Legrand BTicino Driver Manager F454 1.0.51 contains multiple web vulnerabilities that allow attackers to perform administrative actions without proper request validation. Attackers can exploit cross-site request forgery to change passwords and inject stored cross-site scripting payloads through unvalidated GET parameters.
Affected products
-
Affected
- 1.0.51
- 1.1.14
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| BTicino S.p.A. | Legrand BTicino Driver Manager F454 | unknown | Affected
|
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (5)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-205321 Advisory
- https://www.bticino.com product
- https://www.exploit-db.com/exploits/46850 exploit
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5521.php exploitthird-party-advisory
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5522.php exploitthird-party-advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-205321 | Advisory | |
| https://www.bticino.com | product | |
| https://www.exploit-db.com/exploits/46850 | exploit | |
| https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5521.php | exploitthird-party-advisory | |
| https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5522.php | exploitthird-party-advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulnCheck
Published Dec 24, 2025
Updated Dec 24, 2025
Reserved Dec 24, 2025
Link CVE-2019-25244
CISA Vulnrichment
Updated Dec 24, 2025
Red Hat
No data
GitHub
No data