WWestermo

Products

Exploited and recent CVEs

• CVE-2025-46418 High 7.6 Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition. 0.7%
• CVE-2025-54319 Medium 6.3 An issue was discovered in Westermo WeOS 5 (5.24 through 5.24.4). A threat actor potentially can gain unauthorized access to sensitive information via system logging information (syslog verbose loggin 0.4%
• CVE-2025-46419 Medium 5.9 Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet. 0.4%
• CVE-2024-32943 High 7.5 Westermo L210-F2G Lynx Improper Control of Interaction Frequency 0.5%
• CVE-2024-35246 High 7.5 Westermo L210-F2G Lynx Improper Control of Interaction Frequency 0.5%
• CVE-2024-37183 Medium 5.7 Westermo L210-F2G Lynx Cleartext Transmission of Sensitive Information 0.2%
• CVE-2023-40143 Medium 5.4 Westermo Lynx 0.3%
• CVE-2023-45735 High 8.0 Westermo Lynx Code Injection 0.5%
• CVE-2023-45222 Medium 5.4 Westermo Lynx Cross-site Scripting 0.3%
• CVE-2023-45213 Medium 6.6 Westermo Lynx Permissive Cross-domain Policy with Untrusted Domains 0.4%
• CVE-2023-42765 Medium 5.4 Westermo Lynx Cross-site Scripting 0.3%
• CVE-2023-40544 Medium 5.7 Westermo Lynx Cleartext Transmission of Sensitive Information 0.2%
• CVE-2023-45227 Medium 5.4 Westermo Lynx Cross-site Scripting 0.3%
• CVE-2023-38579 High 8.0 Westermo Lynx 206-F2G Cross-Site Request Forgery 0.2%
• CVE-2020-12504 Critical 9.8 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products 3.0%
• CVE-2020-12503 High 7.2 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products 22.8%
• CVE-2020-12502 High 8.8 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products 1.0%
• CVE-2020-12501 Critical 9.8 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products 3.3%
• CVE-2020-12500 Critical 9.8 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products 2.9%