Description
Multiple Western Telematic (WTI) products contain a web interface that is vulnerable to a local file inclusion attack (LFI), where any authenticated user has privileged access to files on the device's filesystem.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Western Telematic | Network Power Switch (NPS Series) | ≤ 6.62 | — |
| Western Telematic | Console Server (DSM Series) | ≤ 6.62 | — |
| Western Telematic | Console Server + PDU Combo Unit (CPM Series) | ≤ 6.62 | — |
Advisories 1
- ICSA-25-035-01 Western Telematic Inc NPS Series, DSM Series, CPM Series CISA ICS & IT advisories · Feb 4, 2025