Skip to content
OpenAdvisories

Product · Westermo

Lynx

8 known vulnerabilities.

Lynx at a glance

Last 12 months
0
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Medium 5.4
    CVE-2023-40143

    Westermo Lynx

    An attacker with access to the Westermo Lynx web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "forward.0.domain" parameter.

    Westermo Lynx
  • High 8.0
    CVE-2023-45735

    Westermo Lynx Code Injection

    A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that could affect the correct functioning of the device.

    Westermo Lynx
  • Medium 5.4
    CVE-2023-45222

    Westermo Lynx Cross-site Scripting

    An attacker with access to the web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "autorefresh" parameter.

    Westermo Lynx
  • Medium 6.6
    CVE-2023-45213

    Westermo Lynx Permissive Cross-domain Policy with Untrusted Domains

    A potential attacker with access to the Westermo Lynx device would be able to execute malicious code that could affect the correct functioning of the device.

    Westermo Lynx
  • Medium 5.4
    CVE-2023-42765

    Westermo Lynx Cross-site Scripting

    An attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "username" parameter in the SNMP configuration.

    Westermo Lynx
  • Medium 5.7
    CVE-2023-40544

    Westermo Lynx Cleartext Transmission of Sensitive Information

    An attacker with access to the network where the affected devices are located could maliciously actions to obtain, via a sniffer, sensitive information exchanged via TCP communications.

    Westermo Lynx
  • Medium 5.4
    CVE-2023-45227

    Westermo Lynx Cross-site Scripting

    An attacker with access to the web application with vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "dns.0.server" parameter.

    Westermo Lynx
  • High 8.0
    CVE-2023-38579

    Westermo Lynx 206-F2G Cross-Site Request Forgery

    The cross-site request forgery token in the request may be predictable or easily guessable allowing attackers to craft a malicious request, which could be triggered by a victim unknowingly. In a successful CSRF attack, the attacker could lead the victim user …

    Westermo Lynx