Welotec

5 CVEs across 42 Welotec products. Browse Welotec vulnerabilities, severities, and proof-of-concept exploits.

Welotec products with known CVEs

ProductCVEs
Tk515l2
Tk515l Set2
Tk515l-W2
Tk515l-W Set2
Tk525l2
Tk525l Set2
Tk525l-W2
Tk525l-W Set2
Tk525u2
Tk525u Set2
Tk525w2
Tk525w Set2
Tk535l12
Tk535l1 Set2
Eg400mk2-D11001-0001011
Eg400mk2-D11101-0001011
Eg500mk2-A11001-0001011
Eg500mk2-A11001-0002011
Eg500mk2-A11101-0001011
Eg500mk2-A12011-0001011
Eg500mk2-A21101-0001011
Eg500mk2-B11001-0001011
Eg500mk2-B11101-0001011
Eg500mk2-C11001-0001011
Eg500mk2-C11101-0001011
Eg503l1
Eg503l 4gb1
Eg503l-G1
Eg503w1
Eg503w 4gb1
Eg602l1
Eg602w1
Eg603l Mk21
Eg603w Mk21
Eg802w1
Eg802w I7 512gb Dinrail1
Eg802w I7 512gb W/o Dinrail1
Eg804w1
Eg804w Pro1
Smart Ems1
Smartems Web Application1
Vpn Security Suite1
Welotec CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-41714High8.82025-09-10The upload endpoint insufficiently validates the 'Upload-Key' request header. By supplying path traversal sequences, an authenticated attacker can cause the se…
CVE-2025-41702Critical9.82025-08-26The JWT secret key is embedded in the egOS WebGUI backend and is readable to the default user. An unauthenticated remote attacker can generate valid HS256 toke…
CVE-2024-3911Medium6.52024-04-23An unauthenticated remote attacker can deceive users into performing unintended actions due to improper restriction of rendered UI layers or frames. 
CVE-2023-1083Critical9.82024-04-09An unauthenticated remote attacker who is aware of a MQTT topic name can send and receive messages, including GET/SET configuration commands, reboot commands…
CVE-2023-1082High8.82024-04-09An remote attacker with low privileges can perform a command injection which can lead to root access.