Westermo vulnerabilities
19 published CVEs name Westermo among the affected products.
- Published CVEs
- 19
- Last 12 months
- 1
- Critical
- 3
- Known exploited
- 0
Critical 3High 7Medium 9Low 0Not scored 0
CVEs per yearBy the year they were published
- 20205
- 202411
- 20252
- 20261
Newest CVEs
- CVE-2025-46418
Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition.
Westermo · WeOS
High7.6 - CVE-2025-54319
An issue was discovered in Westermo WeOS 5 (5.24 through 5.24.4). A threat actor potentially can gain unauthorized access to sensitive information via system…
Westermo · WeOS
Medium6.3 - CVE-2025-46419
Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet.
Westermo · WeOS
Medium5.9 - CVE-2024-32943
Westermo L210-F2G Lynx Improper Control of Interaction Frequency
Westermo · L210-F2G Lynx
High8.7 - CVE-2024-35246
Westermo L210-F2G Lynx Improper Control of Interaction Frequency
Westermo · L210-F2G Lynx
High8.7 - CVE-2024-37183
Westermo L210-F2G Lynx Cleartext Transmission of Sensitive Information
Westermo · L210-F2G Lynx
Medium6.9 - CVE-2023-40143
Westermo Lynx
Westermo · Lynx
Medium5.4 - CVE-2023-45735
Westermo Lynx Code Injection
Westermo · Lynx
High8.0 - CVE-2023-45222
Westermo Lynx Cross-site Scripting
Westermo · Lynx
Medium5.4 - CVE-2023-45213
Westermo Lynx Permissive Cross-domain Policy with Untrusted Domains
Westermo · Lynx
Medium6.6
Products with the most CVEs
Most common weaknesses
- CWE-79 Cross-site scripting (XSS)4
- CWE-319 Cleartext transmission of sensitive information2
- CWE-352 Cross-site request forgery (CSRF)2
- CWE-799 2
- CWE-1286 1
- CWE-306 Missing authentication for a critical function1
- CWE-532 Sensitive information in a log file1
- CWE-697 1
- CWE-78 OS command injection1
- CWE-798 Hard-coded credentials1