Westermo Weos
4 CVEs affecting Westermo Weos. Latest disclosed: 2026-09-02. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-7923 | Critical | 9.0 | 2016-01-30 | Westermo WeOS before 4.19.0 uses the same SSL private key across different customers' installations, which makes it easier for man-in-the-middle attackers to d… |
CVE-2025-46418 | High | 7.6 | 2026-09-02 | Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition. |
CVE-2025-54319 | Medium | 6.3 | 2025-07-20 | An issue was discovered in Westermo WeOS 5 (5.24 through 5.24.4). A threat actor potentially can gain unauthorized access to sensitive information via system l… |
CVE-2025-46419 | Medium | 5.9 | 2025-04-24 | Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet. |