Code injection

The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types and execute ASP code...

PT-2019-9876

Name of the Vulnerable Software and Affected Versions Westermo DR-250 versions Pre-5162 Westermo DR-260 versions Pre-5162 Description The issue concerns the /uploadfile functionality, which allows remote users to upload malicious file types and execute ASP code. Recommendations For Westermo DR-25...

PT-2019-9877

Name of the Vulnerable Software and Affected Versions Westermo DR-250 versions Pre-5162 Westermo DR-260 versions Pre-5162 Description The issue allows for Cross-Site Request Forgery CSRF attacks. Recommendations For Westermo DR-250 version Pre-5162, update to a version post-5162 to resolve the...

CVE-2018-19612: Unrestricted Upload of File with Dangerous Type

The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types and execute ASP code...

CVE-2018-19613: Cross-Site Request Forgery (CSRF)

Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF...

Cross site scripting

XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers...

PT-2019-9878

Name of the Vulnerable Software and Affected Versions Westermo DR-250 versions Pre-5162 Westermo DR-260 versions Pre-5162 Description A security issue exists in the /cmdexec/cmdexe?cmd= function, allowing for potential exploitation. Recommendations For Westermo DR-250 version Pre-5162, update to ...

CVE-2018-19614: Improper Neutralization of Input During Web Page Generation

XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers...