Westermo kayıtları
westermo üreticisine ait 21 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-352 Cross-Site Request Forgery (CSRF)3
- CWE-798 Use of Hard-coded Credentials2
- CWE-799 Improper Control of Interaction Frequency2
- CWE-319 Cleartext Transmission of Sensitive Information2
- CWE-256 Plaintext Storage of a Password1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
21 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2020-12504İstismar yok | Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx productspepperl-fuchs · es7510-xt firmware · CWE-912 | Kritik9,8 | — | %3,0 | 15 Eki 2020 |
39İzleyin | CVE-2024-36081İstismar yok | Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a configuration file containing a cleartext password.CWE-256 | Kritik9,8 | — | %0,6 | 19 May 2024 |
36İzleyin | CVE-2018-19612İstismar yok | The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types anwestermo · dr-250 firmware · CWE-434 | Yüksek8,8 | — | %1,9 | 24 May 2019 |
36İzleyin | CVE-2015-7923İstismar yok | Westermo WeOS before 4.19.0 uses the same SSL private key across different customers' installations, which makes it easier for man-in-the-miwestermo · weos · CWE-310 | Kritik9,0 | — | %1,2 | 30 Oca 2016 |
35İzleyin | CVE-2017-12703İstismar yok | A Cross-Site Request Forgery (CSRF) issue was discovered in Westermo MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 westermo · mrd-305-din firmware · CWE-352 | Yüksek8,8 | — | %0,6 | 25 Ağu 2017 |
35İzleyin | CVE-2023-38579İstismar yok | Westermo Lynx 206-F2G Cross-Site Request Forgerywestermo · l206-f2g firmware · CWE-352 | Yüksek8,8 | — | %0,2 | 6 Şub 2024 |
34İzleyin | CVE-2024-35246İstismar yok | Westermo L210-F2G Lynx Improper Control of Interaction Frequencywestermo · l210-f2g lynx firmware · CWE-799 | Yüksek8,7 | — | %0,5 | 20 Haz 2024 |
34İzleyin | CVE-2024-32943İstismar yok | Westermo L210-F2G Lynx Improper Control of Interaction Frequencywestermo · l210-f2g firmware · CWE-799 | Yüksek8,7 | — | %0,5 | 20 Haz 2024 |
32İzleyin | CVE-2023-45735İstismar yok | Westermo Lynx Code Injectionwestermo · l206-f2g firmware · CWE-94 | Yüksek8,0 | — | %0,5 | 6 Şub 2024 |
30İzleyin | CVE-2016-5816İstismar yok | A Use of Hard-Coded Cryptographic Key issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versionwestermo · mrd-305-din firmware · CWE-798 | Yüksek7,5 | — | %1,5 | 25 Ağu 2017 |
27İzleyin | CVE-2024-37183İstismar yok | Westermo L210-F2G Lynx Cleartext Transmission of Sensitive Informationwestermo · l210-f2g firmware · CWE-319 | Orta6,9 | — | %0,2 | 20 Haz 2024 |
26İzleyin | CVE-2020-7227İstismar yok | Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows an authenticated remote attacker to retriewestermo · mrd-315 firmware | Orta6,5 | — | %1,3 | 18 Oca 2020 |
26İzleyin | CVE-2018-19613İstismar yok | Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF.westermo · dr-260 firmware · CWE-352 | Orta6,5 | — | %0,6 | 24 May 2019 |
26İzleyin | CVE-2023-45213İstismar yok | Westermo Lynx Permissive Cross-domain Policy with Untrusted Domainswestermo · l206-f2g firmware · CWE-942 | Orta6,5 | — | %0,4 | 6 Şub 2024 |
24İzleyin | CVE-2018-19614İstismar yok | XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers.westermo · dr-250 firmware · CWE-79 | Orta6,1 | — | %0,9 | 23 May 2019 |
22İzleyin | CVE-2023-40544İstismar yok | Westermo Lynx Cleartext Transmission of Sensitive Informationwestermo · l206-f2g firmware · CWE-319 | Orta5,7 | — | %0,2 | 6 Şub 2024 |
21İzleyin | CVE-2017-12709İstismar yok | A Use of Hard-Coded Credentials issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions oldewestermo · mrd-305-din firmware · CWE-798 | Orta5,3 | — | %0,3 | 25 Ağu 2017 |
21İzleyin | CVE-2023-45222İstismar yok | Westermo Lynx Cross-site Scriptingwestermo · l206-f2g firmware · CWE-79 | Orta5,4 | — | %0,3 | 6 Şub 2024 |
21İzleyin | CVE-2023-40143İstismar yok | An attacker with access to the Westermo Lynx web application that has the vulnerable software could introduce arbitrary JavaScript by injecwestermo · l206-f2g firmware · CWE-79 | Orta5,4 | — | %0,3 | 6 Şub 2024 |
21İzleyin | CVE-2023-45227İstismar yok | Westermo Lynx Cross-site Scriptingwestermo · l206-f2g firmware · CWE-79 | Orta5,4 | — | %0,3 | 6 Şub 2024 |
21İzleyin | CVE-2023-42765İstismar yok | Westermo Lynx Cross-site Scriptingwestermo · l206-f2g firmware · CWE-79 | Orta5,4 | — | %0,3 | 6 Şub 2024 |
- CVE-2020-1250440Planlayın
Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
KritikCVSS 9,8İstismar yokEPSS %3pepperl-fuchs · es7510-xt firmware15 Eki 2020
- CVE-2024-3608139İzleyin
Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a configuration file containing a cleartext password.
KritikCVSS 9,8İstismar yokEPSS %119 May 2024
- CVE-2018-1961236İzleyin
The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types an
YüksekCVSS 8,8İstismar yokEPSS %2westermo · dr-250 firmware24 May 2019
- CVE-2015-792336İzleyin
Westermo WeOS before 4.19.0 uses the same SSL private key across different customers' installations, which makes it easier for man-in-the-mi
KritikCVSS 9,0İstismar yokEPSS %1westermo · weos30 Oca 2016
- CVE-2017-1270335İzleyin
A Cross-Site Request Forgery (CSRF) issue was discovered in Westermo MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455
YüksekCVSS 8,8İstismar yokEPSS %1westermo · mrd-305-din firmware25 Ağu 2017
- CVE-2023-3857935İzleyin
Westermo Lynx 206-F2G Cross-Site Request Forgery
YüksekCVSS 8,8İstismar yokEPSS %0westermo · l206-f2g firmware6 Şub 2024
- CVE-2024-3524634İzleyin
Westermo L210-F2G Lynx Improper Control of Interaction Frequency
YüksekCVSS 8,7İstismar yokEPSS %0westermo · l210-f2g lynx firmware20 Haz 2024
- CVE-2024-3294334İzleyin
Westermo L210-F2G Lynx Improper Control of Interaction Frequency
YüksekCVSS 8,7İstismar yokEPSS %0westermo · l210-f2g firmware20 Haz 2024
- CVE-2023-4573532İzleyin
Westermo Lynx Code Injection
YüksekCVSS 8,0İstismar yokEPSS %1westermo · l206-f2g firmware6 Şub 2024
- CVE-2016-581630İzleyin
A Use of Hard-Coded Cryptographic Key issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 version
YüksekCVSS 7,5İstismar yokEPSS %2westermo · mrd-305-din firmware25 Ağu 2017
- CVE-2024-3718327İzleyin
Westermo L210-F2G Lynx Cleartext Transmission of Sensitive Information
OrtaCVSS 6,9İstismar yokEPSS %0westermo · l210-f2g firmware20 Haz 2024
- CVE-2020-722726İzleyin
Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows an authenticated remote attacker to retrie
OrtaCVSS 6,5İstismar yokEPSS %1westermo · mrd-315 firmware18 Oca 2020
- CVE-2018-1961326İzleyin
Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF.
OrtaCVSS 6,5İstismar yokEPSS %1westermo · dr-260 firmware24 May 2019
- CVE-2023-4521326İzleyin
Westermo Lynx Permissive Cross-domain Policy with Untrusted Domains
OrtaCVSS 6,5İstismar yokEPSS %0westermo · l206-f2g firmware6 Şub 2024
- CVE-2018-1961424İzleyin
XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers.
OrtaCVSS 6,1İstismar yokEPSS %1westermo · dr-250 firmware23 May 2019
- CVE-2023-4054422İzleyin
Westermo Lynx Cleartext Transmission of Sensitive Information
OrtaCVSS 5,7İstismar yokEPSS %0westermo · l206-f2g firmware6 Şub 2024
- CVE-2017-1270921İzleyin
A Use of Hard-Coded Credentials issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions olde
OrtaCVSS 5,3İstismar yokEPSS %0westermo · mrd-305-din firmware25 Ağu 2017
- CVE-2023-4522221İzleyin
Westermo Lynx Cross-site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0westermo · l206-f2g firmware6 Şub 2024
- CVE-2023-4014321İzleyin
An attacker with access to the Westermo Lynx web application that has the vulnerable software could introduce arbitrary JavaScript by injec
OrtaCVSS 5,4İstismar yokEPSS %0westermo · l206-f2g firmware6 Şub 2024
- CVE-2023-4522721İzleyin
Westermo Lynx Cross-site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0westermo · l206-f2g firmware6 Şub 2024
- CVE-2023-4276521İzleyin
Westermo Lynx Cross-site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0westermo · l206-f2g firmware6 Şub 2024