Lucene search

Dr-250 Firmware Security Vulnerabilities - February

cve

CVE-2018-19612

The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types and execute ASP code.

8.8CVSS

8.7AI Score

0.003EPSS

2019-05-24 05:29 PM

cve

CVE-2018-19613

Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF.

6.5CVSS

6.5AI Score

0.001EPSS

2019-05-24 05:29 PM

cve

CVE-2018-19614

XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers.

6.1CVSS

6AI Score

0.001EPSS

2019-05-23 08:29 PM