Westermo Dr-260

3 CVEs affecting Westermo Dr-260. Latest disclosed: 2019-05-24. Critical: 0, High: 1.

Top CVEs affecting Westermo Dr-260
CVESeverityScorePublishedSummary
CVE-2018-19612High8.82019-05-24The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types and execute ASP code.
CVE-2018-19613Medium6.52019-05-24Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF.
CVE-2018-19614Medium6.12019-05-23XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers.