147 matches found
PT-2024-13281 · Westermo · Westermo Lynx
Name of the Vulnerable Software and Affected Versions: Westermo Lynx affected versions not specified Description: A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that could affect the correct functioning of the device. Recommendations: At the...
PT-2024-13234 · Westermo · Lynx +1
Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: An attacker with access to the web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the autorefresh...
PT-2024-13230 · Westermo · Westermo Lynx
Name of the Vulnerable Software and Affected Versions: Westermo Lynx affected versions not specified Description: A potential attacker with access to the Westermo Lynx device could execute malicious code, affecting the device's correct functioning. Recommendations: At the moment, there is no...
PT-2024-12896 · Westermo · Westermo Lynx 206-F2G
Name of the Vulnerable Software and Affected Versions: Westermo Lynx 206-F2G affected versions not specified Description: An attacker with access to the network where the affected devices are located could maliciously take actions to obtain, via a sniffer, sensitive information exchanged via TCP...
Weak password vulnerability in Westermo MRD-350
Westermo specializes in the design and manufacture of datacom products for critical systems in harsh environments. A weak password vulnerability exists in the Westermo MRD-350, which can be exploited by an attacker to log into the backend and obtain sensitive information...
Westermo MRD-315 Information Disclosure Vulnerability
The Westermo MRD-315 is a 3G wireless router from Westermo, Sweden. An information disclosure vulnerability exists in the Westermo MRD-315 version 1.7.3 and version 1.7.4. The vulnerability stems from a configuration or other error in the operation of a network system or product. An attacker coul...
CVE-2020-7227
Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows an authenticated remote attacker to retrieve the source code of different functions of the web application via requests that lack certain mandatory parameters. This affects ifaces-diag.asp, system.as...
CVE-2020-7227
Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows an authenticated remote attacker to retrieve the source code of different functions of the web application via requests that lack certain mandatory parameters. This affects ifaces-diag.asp, system.as...
Information disclosure
Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows an authenticated remote attacker to retrieve the source code of different functions of the web application via requests that lack certain mandatory parameters. This affects ifaces-diag.asp, system.as...
CVE-2020-7227
Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows an authenticated remote attacker to retrieve the source code of different functions of the web application via requests that lack certain mandatory parameters. This affects ifaces-diag.asp, system.as...
CVE-2020-7227
CVE-2020-7227 affects Westermo MRD-315 devices running firmware 1.7.3 and 1.7.4. An information-disclosure vulnerability allows an authenticated remote attacker to retrieve the source code of several web application functions by issuing requests that omit certain mandatory parameters. Affected pa...
Westermo DR-260 Router, Westermo DR-250 Router and Westermo MR-260 Router Cross-Site Scripting Vulnerabilities
Westermo DR-260 and others are products of the Swedish company Westermo.Westermo DR-260 is a DSL router.Westermo DR-250 is a DSL router.Westermo MR-260 is a 3G multimedia router.Westermo MR-260 is a 3G multimedia router.Westermo MR-260 is a 3G multimedia router.Westermo MR-260 is a 3G multimedia...
CVE-2018-19613
Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF...
CVE-2018-19612
The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types and execute ASP code...
Code injection
The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types and execute ASP code...
Cross site request forgery (csrf)
Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF...
CVE-2018-19612
The CVE-2018-19612 issue affects Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers, where the /uploadfile? feature allows remote attackers to upload malicious file types and execute ASP code. The vulnerability originates from the upload functionality, enabling unauthenticated or unauthenticate...
CVE-2018-19612
The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types and execute ASP code...
CVE-2018-19613
The CVE-2018-19613 entry covers CSRF in Westermo DR-250 Pre-5162, DR-260 Pre-5162, and MR-260 devices. Public sources in the connected documents confirm the vulnerability exists in these routers; no root-cause or patch details are provided in the supplied materials. The records indicate cross-sit...