CVE-2025-46419

Summary

Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet.

Affected Software

Weaknesses

• CWE-1286: CWE-1286 Improper Validation of Syntactic Correctness of Input

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.westermo.com/-/media/Files/Cyber-security/westermo_sa_25-02_malformed_esp_packet_could_cause_denial_vulnerability_in_weos.pdf?rev=9af5c93194f343a0b4fad2d24d032df2&hash=87F4AD7F74C2BE69CA1B4C24F29B82EA

• ←Previous
• Next→