CVE-2018-19612

The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types and execute ASP code.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2019-05-24

Last modified

2024-08-05

Weaknesses

CWE-434

Affected products

• Dr-250 Firmware (Westermo)
• Dr-260 Firmware (Westermo)
• Mr-260 Firmware (Westermo)

References

• https://github.com/TheWickerMan/CVE-Disclosures/blob/master/CVE-2018-19612.md
• https://www.westermo.us/