CVE-2025-1359

Summary

CVE-2025-1359 is a recently disclosed vulnerability affecting SIAM Industria de Automação e Monitoramento SIAM 2.0. The issue lies in the processing of the file /qrcode.jsp and stems from a cross-site scripting (XSS) vulnerability. An attacker can manipulate the url argument to inject malicious code, potentially gaining unauthorized access to user data or taking control of the affected system. This vulnerability can be exploited remotely, and the exploit has been made public, increasing the risk of widespread exploitation. Despite early disclosure to the vendor, they have yet to respond or provide a patch.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.