Westermo vulnerabilities

Products

• L206-f2g Firmware 8
• Lynx 8
• Pmi-110-f2g 5
• Weos 4
• Dr-250 Firmware 3
• Dr-260 Firmware 3
• L210-f2g Lynx 3
• Mr-260 Firmware 3
• Mrd-305-din Firmware 3
• Mrd-315-din Firmware 3
• Mrd-355-din Firmware 3
• Mrd-455-din Firmware 3
• L210-f2g Firmware 2
• L210-f2g Lynx Firmware 2

Newest

• westermo weos Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition. CVE-2025-46418 7.6 HighSeptember 2, 2026
• westermo weos An issue was discovered in Westermo WeOS 5 (5.24 through 5.24.4). A threat actor potentially can... CVE-2025-54319 6.3 MediumJuly 20, 2025
• westermo weos Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet. CVE-2025-46419 5.9 MediumApril 24, 2025
• westermo l210-f2g lynx, l210-f2g firmware +1 more Westermo L210-F2G Lynx Improper Control of Interaction Frequency CVE-2024-32943 8.7 HighJune 20, 2024
• westermo l210-f2g lynx, l210-f2g lynx firmware +1 more Westermo L210-F2G Lynx Improper Control of Interaction Frequency CVE-2024-35246 8.7 HighJune 20, 2024
• westermo l210-f2g lynx, l210-f2g firmware, l210-f2g lynx firmware +2 more Westermo L210-F2G Lynx Cleartext Transmission of Sensitive Information CVE-2024-37183 6.9 MediumJune 20, 2024
• westermo edw-100 Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a... CVE-2024-36081 9.8 CriticalMay 19, 2024
• westermo lynx, l206-f2g firmware +1 more Westermo Lynx CVE-2023-40143 5.4 MediumFebruary 6, 2024
• westermo lynx, l206-f2g1 firmware, l206-f2g firmware +2 more Westermo Lynx Code Injection CVE-2023-45735 8.0 HighFebruary 6, 2024
• westermo lynx, l206-f2g firmware +1 more Westermo Lynx Cross-site Scripting CVE-2023-45222 5.4 MediumFebruary 6, 2024
• westermo lynx, l206-f2g firmware +1 more Westermo Lynx Permissive Cross-domain Policy with Untrusted Domains CVE-2023-45213 6.6 MediumFebruary 6, 2024
• westermo lynx, l206-f2g firmware +1 more Westermo Lynx Cross-site Scripting CVE-2023-42765 5.4 MediumFebruary 6, 2024
• westermo lynx, l206-f2g firmware +1 more Westermo Lynx Cleartext Transmission of Sensitive Information CVE-2023-40544 5.7 MediumFebruary 6, 2024
• westermo lynx, l206-f2g firmware +1 more Westermo Lynx Cross-site Scripting CVE-2023-45227 5.4 MediumFebruary 6, 2024
• westermo lynx, l206-f2g firmware +1 more Westermo Lynx 206-F2G Cross-Site Request Forgery CVE-2023-38579 8.0 HighFebruary 6, 2024
• pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, jetwave 2212g firmware +29 more +31 more Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVE-2020-12504 9.8 CriticalOctober 15, 2020
• pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, jetnet 4510 firmware +28 more +30 more Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVE-2020-12503 EPSS 22.8% 7.2 HighOctober 15, 2020
• pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, jetnet 4510 firmware +23 more +25 more Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVE-2020-12502 8.8 HighOctober 15, 2020
• pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, jetnet4510 firmware +26 more +28 more Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVE-2020-12501 9.8 CriticalOctober 15, 2020
• pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, pepperl-fuchs es7506 firmware +13 more +15 more Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products CVE-2020-12500 9.8 CriticalOctober 15, 2020
• westermo mrd-315 firmware Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows... CVE-2020-7227 6.5 MediumJanuary 18, 2020
• westermo dr-250 firmware, dr-260 firmware, mr-260 firmware +2 more The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows... CVE-2018-19612 8.8 HighMay 24, 2019
• westermo dr-250 firmware, dr-260 firmware, mr-260 firmware +2 more Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF. CVE-2018-19613 6.5 MediumMay 24, 2019
• westermo dr-250 firmware, dr-260 firmware, mr-260 firmware +2 more XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162 and DR-260 Pre-5162... CVE-2018-19614 6.1 MediumMay 23, 2019
• westermo mrd-305-din firmware, mrd-315-din firmware, mrd-355-din firmware +1 more +3 more A Use of Hard-Coded Credentials issue was discovered in MRD-305-DIN versions older than 1.7.5.0,... CVE-2017-12709 5.3 MediumAugust 25, 2017
• westermo mrd-305-din firmware, mrd-315-din firmware, mrd-355-din firmware +1 more +3 more A Cross-Site Request Forgery (CSRF) issue was discovered in Westermo MRD-305-DIN versions older... CVE-2017-12703 8.8 HighAugust 25, 2017
• westermo mrd-305-din firmware, mrd-315-din firmware, mrd-355-din firmware +1 more +3 more A Use of Hard-Coded Cryptographic Key issue was discovered in MRD-305-DIN versions older than 1.7... CVE-2016-5816 7.5 HighAugust 25, 2017
• westermo weos Westermo WeOS before 4.19.0 uses the same SSL private key across different customers'... CVE-2015-7923 9.0 CriticalJanuary 30, 2016