Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2024-36081

Published: 19/05/2024 Updated: 20/05/2024

Vulnerability Summary

Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a configuration file containing a cleartext password. NOTE: this is a serial-to-Ethernet converter that should not be placed at the edge of the network.

ICS Advisories

https://ics-cert.us-cert.gov/advisories/235e7e177ed9bfe56e4e97b2613cef5c
Critical Infrastructure Sectors: Energy, Water and Wastewater Systems, Transportation Systems

References

https://www.westermo.com/-/media/Files/Cyber-security/westermo_sa_EDW-100_24-05.pdfhttps://nvd.nist.govhttps://www.cisa.gov/news-events/ics-advisories/icsa-24-151-04
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-23316SQL injectiontype confusionCVE-2024-20697CVE-2024-4344localCVE-2024-30043CVE-2024-3821CVE-2024-5041
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook