32 matches found
CVE-2025-46418
Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition...
CVE-2025-46418
Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition...
CVE-2025-46418
Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition...
CVE-2025-46418
Westermo WeOS 5 (version 5.24 and later), an operating system deployed in industrial settings, is vulnerable to OS command injection through unsafe handling of media definitions . An attacker with administrative privileges can execute commands beyond their typical access rights, potentially compr...
CVE-2025-46418: Improper Neutralization of Special Elements used in an OS Command
Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition...
EUVD-2025-210821
Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition...
EUVD-2015-7821
Malware in sbrugna...
EUVD-2025-22038
Malicious code in bioql PyPI...
EUVD-2025-12150
Malicious code in bioql PyPI...
CISA Releases Nine Industrial Control Systems Advisories
CISA released nine Industrial Control Systems ICS advisories on September 18, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-261-01 Westermo Network Technologies WeOS 5 ICSA-25-261-02 Westermo Network...
CVE-2025-54319
An issue was discovered in Westermo WeOS 5 5.24 through 5.24.4. A threat actor potentially can gain unauthorized access to sensitive information via system logging information syslog verbose logging that includes credentials...
CVE-2025-54319
An issue was discovered in Westermo WeOS 5 5.24 through 5.24.4. A threat actor potentially can gain unauthorized access to sensitive information via system logging information syslog verbose logging that includes credentials...
CVE-2025-54319
Westermo WeOS versions 5.24–5.24.4 are affected by CVE-2025-54319 due to verbose syslog logging that can disclose credentials, enabling potential unauthorized access to sensitive information. Root cause: logging configuration exposes credentials in syslog. Affected software: Westermo WeOS 5.x (5....
CVE-2025-54319
An issue was discovered in Westermo WeOS 5 5.24 through 5.24.4. A threat actor potentially can gain unauthorized access to sensitive information via system logging information syslog verbose logging that includes credentials...
PT-2025-30217 · Westermo · Westermo Weos
Name of the Vulnerable Software and Affected Versions: Westermo WeOS versions 5.24 through 5.24.4 Description: An issue was discovered that allows a threat actor to potentially gain unauthorized access to sensitive information via system logging information, specifically through verbose syslog...
CVE-2025-54319
An issue was discovered in Westermo WeOS 5 5.24 through 5.24.4. A threat actor potentially can gain unauthorized access to sensitive information via system logging information syslog verbose logging that includes credentials...
CVE-2025-54319: Insertion of Sensitive Information into Log File
An issue was discovered in Westermo WeOS 5 5.24 through 5.24.4. A threat actor potentially can gain unauthorized access to sensitive information via system logging information syslog verbose logging that includes credentials...
Westermo WeOS 日志信息泄露漏洞
Westermo WeOS is an operating system from Westermo Sweden. A log information disclosure vulnerability exists in Westermo WeOS versions 5.24 through 5.24.4, which originates from the disclosure of system log information and could lead to the disclosure of sensitive information...