Vulnerabilities

TI-2018-13899 CVE-2018-19612 · GHSA-hg76-9w83-fc57

The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers…

MEDIUM 42

The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types and execute ASP code.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01927 Published 2019-05-24 No fix listed CWE-434

TI-2018-13900 CVE-2018-19613 · GHSA-wc9c-xp26-6w43

Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF.

LOW 30

Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00558 Published 2019-05-24 No fix listed CWE-352

TI-2018-13901 CVE-2018-19614 · GHSA-h8q4-p8r2-jmmm

XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers.

LOW 29

XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00865 Published 2019-05-23 No fix listed CWE-79

Vulnerabilities

Filters

The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers…

Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF.

XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers.