Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact
NA

CVE-2024-36080

Published: 19/05/2024 Updated: 20/05/2024

Vulnerability Summary

Westermo EDW-100 devices through 2024-05-03 have a hidden root user account with a hardcoded password that cannot be changed. NOTE: this is a serial-to-Ethernet converter that should not be placed at the edge of the network.

ICS Advisories

https://ics-cert.us-cert.gov/advisories/235e7e177ed9bfe56e4e97b2613cef5c
Critical Infrastructure Sectors: Energy, Water and Wastewater Systems, Transportation Systems

References

https://www.westermo.com/-/media/Files/Cyber-security/westermo_sa_EDW-100_24-05.pdfhttps://nvd.nist.govhttps://www.cisa.gov/news-events/ics-advisories/icsa-24-151-04
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27802template injectionCVE-2024-0044code injectionCVE-2024-35474CVE-2024-27857CVE-2024-23251CVE-2024-23692physical
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook