Description
Westermo WeOS before 4.19.0 uses the same SSL private key across different customers' installations, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a key.
Advisories 1
- ICSA-16-028-01A Westermo Industrial Switch Hard-coded Certificate Vulnerability (Update A) CISA ICS & IT advisories · Jun 5, 2025