Leviton AcquiSuite and Energy Monitoring Hub

Risk Summary

Successful exploitation of this vulnerability could allow an attacker to craft a malicious payload in URL parameters that would get executed in a client browser when accessed by a user, steal session tokens and control the service.

CVEs (1)

Remediations

• Leviton has not responded to requests to work with CISA to mitigate this vulnerability. Users of these affected products are welcome to contact Leviton's customer support for additional information.

Affected Vendors

Affected Products (2)

Affected Sectors

Communications