Skip to content
OpenAdvisories

Vendor

Westermo

19 known vulnerabilities.

7 results · Clear filters · Feed

  • High 7.6

    Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition.

  • High 7.5

    Westermo L210-F2G Lynx Improper Control of Interaction Frequency

    An attacker may be able to cause a denial-of-service condition by sending many SSH packets repeatedly.

  • High 7.5

    Westermo L210-F2G Lynx Improper Control of Interaction Frequency

    An attacker may be able to cause a denial-of-service condition by sending many packets repeatedly.

  • High 8.0

    Westermo Lynx Code Injection

    A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that could affect the correct functioning of the device.

  • High 8.0

    Westermo Lynx 206-F2G Cross-Site Request Forgery

    The cross-site request forgery token in the request may be predictable or easily guessable allowing attackers to craft a malicious request, which could be triggered by a victim unknowingly. In a successful CSRF attack, the attacker could lead the victim user …

  • High 7.2
    CVE-2020-12503 EPSS 23%

    Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

    Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/…

  • High 8.8

    Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

    Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT (all versions) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/…