Vulnerabilities

TI-2017-09416 CVE-2017-12709 · GHSA-gc73-922g-765g

Hard-coded credentials in Westermo MRD-305-DIN, MRD-315, MRD-355, and MRD-455

LOW 24

A Use of Hard-Coded Credentials issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0.

CVSS 3.0MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00306 Published 2017-08-25 No fix listed CWE-798

TI-2017-09410 CVE-2017-12703 · GHSA-mm9p-vhg8-49hj

Cross-site request forgery in Westermo MRD-305-DIN, MRD-315, MRD-355, and MRD-455

LOW 39

A Cross-Site Request Forgery (CSRF) issue was discovered in Westermo MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00642 Published 2017-08-25 No fix listed CWE-352

TI-2016-05045 CVE-2016-5816 · GHSA-xr96-c25j-m65g

A Use of Hard-Coded Cryptographic Key issue was discovered in MRD-305-DIN versions older…

LOW 36

A Use of Hard-Coded Cryptographic Key issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01532 Published 2017-08-25 No fix listed CWE-798

Vulnerabilities

Filters

Hard-coded credentials in Westermo MRD-305-DIN, MRD-315, MRD-355, and MRD-455

Cross-site request forgery in Westermo MRD-305-DIN, MRD-315, MRD-355, and MRD-455

A Use of Hard-Coded Cryptographic Key issue was discovered in MRD-305-DIN versions older…