Description
Leviton AcquiSuite and Energy Monitoring Hub
are susceptible to a cross-site scripting vulnerability, allowing
an attacker to craft a malicious payload in URL parameters, which would
execute in a client browser when accessed by a user, steal session
tokens, and control the service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Leviton | AcquiSuite | Version A8810 | — |
| Leviton | Energy Monitoring Hub | Version A8812 | — |
Advisories 1
- ICSA-25-198-01 Leviton AcquiSuite and Energy Monitoring Hub CISA ICS & IT advisories · Jul 17, 2025