PatchTheCVEwestermo vulnerabilities
Recent CVEs affecting westermo products. 11 tracked.
westermo has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-06-20. Highest priority: CVE-2024-35246 (score 42/100).
- CVE-2024-37183 MEDIUM 5.7 MITIGATE Plain text credentials and session ID can be captured with a network sniffer.
- CVE-2024-35246 HIGH 7.5 MITIGATE An attacker may be able to cause a denial-of-service condition by sending many packets repeatedly.
- CVE-2024-32943 HIGH 7.5 MITIGATE An attacker may be able to cause a denial-of-service condition by sending many SSH packets repeatedly.
- CVE-2023-45735 HIGH 8.0 MITIGATE A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that c
- CVE-2023-45227 MEDIUM 5.4 MITIGATE An attacker with access to the web application with vulnerable software could introduce arbitra
- CVE-2023-45222 MEDIUM 5.4 MITIGATE An attacker with access to the web application that has the vulnerable software could introduce arbitrary J
- CVE-2023-45213 MEDIUM 6.6 MITIGATE A potential attacker with access to the Westermo Lynx device would be able to execute malicious code th
- CVE-2023-42765 MEDIUM 5.4 MITIGATE An attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting
- CVE-2023-40544 MEDIUM 5.7 MITIGATE An attacker with access to the network where the affected devices are located could maliciously act
- CVE-2023-40143 MEDIUM 5.4 MITIGATE An attacker with access to the Westermo Lynx web application that has the vulnerable software could introduce
- CVE-2023-38579 HIGH 8.0 MITIGATE The cross-site request forgery token in the request may be predictable or easily guessable allowi
FAQ
How do I fix westermo vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is westermo being exploited right now?
None of the tracked westermo CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which westermo CVE should I patch first?
CVE-2024-35246 currently ranks highest (42/100): An attacker may be able to cause a denial-of-service condition by sending many packets repeatedly..