Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Westermo WeOS before 4.19.0 uses the same SSL private key across different customers' installations, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a key.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Westermo WeOS 权限许可和访问控制漏洞
Vulnerability Description
Westermo WeOS（Westermo Operating System）是瑞典威斯特摩（Westermo）公司的一套用于第二层和第三层交换的网络操作系统。 Westermo WeOS 4.19.0之前版本中存在安全漏洞，该漏洞源于程序在不同的用户安装程序中使用相同的SSL私钥。攻击者可借助已知的密钥利用该漏洞实施中间人攻击，破坏加密保护机制。
CVSS Information
N/A
Vulnerability Type
N/A