CVE Tools

Westermo

20 CVEs tracked since 2016. Since Jan 2016, none of them reached CISA KEV.

Westermo CVEs per month

Jan 2016 to Feb 2024. Point at a month, or focus the strip and use the arrow keys.
Westermo CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2016-0110
2016-02null or fewer
2016-03null or fewer
2016-04null or fewer
2016-05null or fewer
2016-06null or fewer
2016-07null or fewer
2016-08null or fewer
2016-09null or fewer
2016-10null or fewer
2016-11null or fewer
2016-12null or fewer
2017-01null or fewer
2017-02null or fewer
2017-03null or fewer
2017-04null or fewer
2017-05null or fewer
2017-06null or fewer
2017-07null or fewer
2017-0830
2017-09null or fewer
2017-10null or fewer
2017-11null or fewer
2017-12null or fewer
2018-01null or fewer
2018-02null or fewer
2018-03null or fewer
2018-04null or fewer
2018-05null or fewer
2018-06null or fewer
2018-07null or fewer
2018-08null or fewer
2018-09null or fewer
2018-10null or fewer
2018-11null or fewer
2018-12null or fewer
2019-01null or fewer
2019-02null or fewer
2019-03null or fewer
2019-04null or fewer
2019-0530
2019-06null or fewer
2019-07null or fewer
2019-08null or fewer
2019-09null or fewer
2019-10null or fewer
2019-11null or fewer
2019-12null or fewer
2020-01null or fewer
2020-02null or fewer
2020-03null or fewer
2020-04null or fewer
2020-05null or fewer
2020-06null or fewer
2020-07null or fewer
2020-08null or fewer
2020-09null or fewer
2020-1050
2020-11null or fewer
2020-12null or fewer
2021-01null or fewer
2021-02null or fewer
2021-03null or fewer
2021-04null or fewer
2021-05null or fewer
2021-06null or fewer
2021-07null or fewer
2021-08null or fewer
2021-09null or fewer
2021-10null or fewer
2021-11null or fewer
2021-12null or fewer
2022-01null or fewer
2022-02null or fewer
2022-03null or fewer
2022-04null or fewer
2022-05null or fewer
2022-06null or fewer
2022-07null or fewer
2022-08null or fewer
2022-09null or fewer
2022-10null or fewer
2022-11null or fewer
2022-12null or fewer
2023-01null or fewer
2023-02null or fewer
2023-03null or fewer
2023-04null or fewer
2023-05null or fewer
2023-06null or fewer
2023-07null or fewer
2023-08null or fewer
2023-09null or fewer
2023-10null or fewer
2023-11null or fewer
2023-12null or fewer
2024-01null or fewer
2024-0280

Products

The products that kept showing up in Westermo's monthly top three, with their CVEs summed over those months.

  1. L206-F2G Firmware81 month
  2. Lynx81 month
  3. Pmi-110-f2g51 month
  4. Dr-250 Firmware31 month
  5. Dr-260 Firmware31 month
  6. Mr-260 Firmware31 month
  7. Mrd-305-din Firmware31 month
  8. Mrd-315-din Firmware31 month
  9. Mrd-355-din Firmware31 month
  10. Pmi-110-f2g Firmware11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Westermo.

  1. CVE-2025-46418Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition.7.6
  2. CVE-2025-54319An issue was discovered in Westermo WeOS 5 (5.24 through 5.24.4). A threat actor potentially can gain unauthorized access to sensitive information via system logging information (syslog verbose log...6.3
  3. CVE-2025-46419Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet.5.9
  4. CVE-2024-32943Westermo L210-F2G Lynx Improper Control of Interaction Frequency7.5
  5. CVE-2024-35246Westermo L210-F2G Lynx Improper Control of Interaction Frequency7.5
  6. CVE-2024-37183Westermo L210-F2G Lynx Cleartext Transmission of Sensitive Information5.7
  7. CVE-2024-36080Westermo EDW-100 devices through 2024-05-03 have a hidden root user account with a hardcoded password that cannot be changed. NOTE: this is a serial-to-Ethernet converter that should not be placed ...9.8
  8. CVE-2024-36081Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a configuration file containing a cleartext password. NOTE: this is a serial-to-Ethernet converter that should ...9.8
  9. CVE-2023-40143Westermo Lynx 5.4
  10. CVE-2023-45735Westermo Lynx Code Injection8.0
  11. CVE-2023-45222Westermo Lynx Cross-site Scripting5.4
  12. CVE-2023-45213 Westermo Lynx Permissive Cross-domain Policy with Untrusted Domains6.6
  13. CVE-2023-42765Westermo Lynx Cross-site Scripting5.4
  14. CVE-2023-40544Westermo Lynx Cleartext Transmission of Sensitive Information5.7
  15. CVE-2023-45227Westermo Lynx Cross-site Scripting5.4

The record

Peak rank
#86 in Oct 2020
Busiest month shown
Feb 2024, 8 CVEs
Months with a KEV entry
0 since Jan 2016
Monthly snapshots
5 since 2016
Westermo's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store