CVE Catalog
CVE-2025-46418
HighCVSS 7.6Exploitation Probability (EPSS)
Elevated risk0.68%
50th percentile - higher than 50% of all known CVEs
Summary
Westermo WeOS 5.x starting from version 5.24 allows OS command injection via a media definition.
Risk Assessment
An attacker can execute arbitrary commands on the device, potentially leading to full compromise of the network device and network integrity.
Recommendation
Update WeOS to the latest patched version and restrict access to media configuration to trusted administrators only.
Other vulnerabilities in Westermo WeOS
Original NVD description (English source)
Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition.