Westermo

Records27All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

Westermo records in CISA KEV

No Westermo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

L206-f2g Firmware 8 records MEDIUM Dr-250 Firmware 3 records MEDIUM Dr-260 Firmware 3 records MEDIUM Mr-260 Firmware 3 records MEDIUM Mrd-305-din Firmware 3 records LOW Mrd-315-din Firmware 3 records LOW Mrd-355-din Firmware 3 records LOW Mrd-455-din Firmware 3 records LOW

Records

3 records in Dr-260 Firmware · all components

TI-2018-13899 CVE-2018-19612 · GHSA-hg76-9w83-fc57

The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers…

MEDIUM 42

The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types and execute ASP code.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01927 Published 2019-05-24 No fix listed CWE-434

TI-2018-13900 CVE-2018-19613 · GHSA-wc9c-xp26-6w43

Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF.

LOW 30

Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00558 Published 2019-05-24 No fix listed CWE-352

TI-2018-13901 CVE-2018-19614 · GHSA-h8q4-p8r2-jmmm

XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers.

LOW 29

XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00865 Published 2019-05-23 No fix listed CWE-79

Open these records in search →

Critical	4
High	10
Medium	13
Low	0
No CVSS	0