PT-2025-17681 · Westermo · Weos

Published 2025-04-24 · Updated 2025-04-24 · CVE-2025-46419

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Westermo WeOS versions 5 through 5.23.0

Description The issue allows for a reboot via a malformed ESP packet.

Recommendations For Westermo WeOS versions 5 through 5.23.0, update to a version later than 5.23.0 to resolve the issue.

Fix

Weakness Enumeration

CWE-1286

Related Identifiers

CVE-2025-46419

Affected Products

Weos

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-46419 · Security Note
• https://t.me/cvetracker/22245 · Telegram Post
• https://t.me/cvedetector/23627 · Telegram Post
• https://t.me/cvenotify/119622 · Telegram Post
• https://westermo.com/-/media/Files/Cyber-security/westermo_sa_25-02_malformed_esp_packet_could_cause_denial_vulnerability_in_weos.pdf?rev=9af5c93194f343a0b4fad2d24d032df2&hash=87F4AD7F74C2BE69CA1B4C24F29B82EA · Note
• https://twitter.com/CVEnew/status/1915236020150300996 · Twitter Post