Westermo-tuotteiden korkeariskiset ja pienemmätkin  turvallisuuskysymykset julkaistaan aina. Jos haluat näihin liittyviä Westermon tiedotteita sähköpostiisi, täytä allaoleva lomake. 

Jos pohdit jotainturvallisuuskysymystä, mikäliittyy Westermon tuotteisiin, voit aina ottaa yhteyttä meidän PSIRT tiimiin.

2024

• Westermo-24-13: Possible vulnerability when reading configuration files in WeOS 2024-11-13
• Westermo-24-10: Potential denial-of-service vulnerability 2024-11-11
• Westermo-24-06: CVE-2021-36369 & CVE-2023-48795 - Vulnerability in SSH component of WeOS 2024-11-11
• westermo sa IbexOS Web Interface/WebAPI Session hijacking (Westermo-24-12) 2024-10-03
• Westermo sa Exchange of sensitive information (Westermo 24-04) 2024-05-07
• westermo sa EDW-100 Security Advisory (Westermo 24-05) 2024-05-06
• westermo sa unauthorized exposure of information through directory listing (Westermo 24-03) 2024-04-08
• westermo_sa_vulnerabilities_in_web_interface_for_weos_products (Westermo 24-01) 2024-02-23
• westermo_sa_vulnerabilities_in_web_interface_for_weos_products (Westermo 24-02) 2024-02-23

2023

• Security Vulnerability regarding SNMPv3 in Ibex SW (Westermo 23-01) 2023-01-11

2022

No security advisories issued.

2021

• Eltec response to Log4j2 vulnerability related to OpenWRT (Eltec 21-01) 2021-12-20
• Westermo response to Log4j2 vulnerability related to xRD FW (Westermo 21-05) 2021-12-20
• Westermo response to Log4j2 vulnerability related to Ibex SW (Westermo 21-04) 2021-12-17
• Westermo response to Log4j2 vulnerability related to WeOS (Westermo 21-03) 2021-12-14
• Security Vulnerability in the wireless 802.11 implementation (Westermo 21-02) 2021-07-19
• Security Vulnerability in SSH (Westermo 21-01) 2021-02-09

2020

• Westermo Response to Ripple20 (Westermo 20-02) 2020-07-31
• Security Vulnerability in the PPP Package (Westermo-20-01) 2020-03-31
  

2019

No security advisories issued.

2018

• LibSSH - Authentication Bypass Vulnerability (Westermo-18-05) 2018-11-26
• Vulnerabilities in BusyBox (Westermo-18-04) 2018-05-29
• Mongoose web server vulnerabilities (Westermo-18-03) 2018-05-29
• WeOS Vulnerable to Cross Site Request Forgery attack (Westermo-18-02) 2018-05-29
• Meltdown and Spectre (Westermo-18-01) 2018-01-05

2017

• WiFi key reinstallation attack (WEOS-17-03) 2017-10-17
• Multiple vulnerabilities in dnsmasq (WEOS-17-02) 2017-10-12
• Multiple vulnerabilities in MRD products (WEOS-15-08) 2017-08-14
• MSG_PEEK second checksum (WEOS-17-01) 2017-05-30

2016

• CVE-2015-7547 glibc getaddrinfo stack-based buffer overflow (WEOS-16-03) 2016-02-09

2015

• Multiple vulnerabilities in OpenSSL (update 1.0.1q) v1 (WEOS-15-07) 2015-12-04
• Default factory web interface certificate (WeOS-15-06) 2015-11-30