Westermo

Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a configuration file containing a cleartext password. NOTE: thi…

An attacker may be able to cause a denial-of-service condition by sending many SSH packets repeatedly.

An attacker may be able to cause a denial-of-service condition by sending many packets repeatedly.

Plain text credentials and session ID can be captured with a network sniffer.

An attacker with access to the Westermo Lynx web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cr…

A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that could affect the correct functioning of …

An attacker with access to the web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scr…

A potential attacker with access to the Westermo Lynx device would be able to execute malicious code that could affect the correct functioning…

An attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the…

An attacker with access to the network where the affected devices are located could maliciously actions to obtain, via a sniffer, sensitiv…