CVE-2025-46419
Quick assessment
Affected
Westermo WeOS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Westermo WeOS是瑞典威斯特摩（Westermo）公司的一个操作系统。 Westermo WeOS 5 5.23.0及之前版本存在安全漏洞，该漏洞源于畸形ESP数据包，可能导致重启。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-46419
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1286
Source: CVE Program / CVE List V5
Vulnerability Title
Westermo WeOS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Westermo WeOS是瑞典威斯特摩（Westermo）公司的一个操作系统。 Westermo WeOS 5 5.23.0及之前版本存在安全漏洞，该漏洞源于畸形ESP数据包，可能导致重启。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-46419
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-46419
请登录查看更多情报信息。
Other References for CVE-2025-46419 (1)
IV. Related Vulnerabilities
Same vendor: Westermo
-
CVE-2025-46418
Westermo WeOS 命令注入漏洞 -
CVE-2025-54319
Westermo WeOS 日志信息泄露漏洞 -
CVE-2024-32943
Westermo L210-F2G Lynx Improper Control of Interaction Frequ -
CVE-2024-35246
Westermo L210-F2G Lynx Improper Control of Interaction Frequ -
CVE-2024-37183
Westermo L210-F2G Lynx Cleartext Transmission of Sensitive I
Same weakness: CWE-1286
-
CVE-2026-100902
Barco ClickShare CX-20 Gen2 Wallpaper Upload wallpaper impro -
CVE-2026-87080
Net::IDN::Punycode::PP versions before 2.590 for Perl decode -
CVE-2026-83611
xmldom: Parser silently accepts a not-well-formed end tag wh -
CVE-2026-0931
Denial-of-service vulnerability in M-Files Server -
CVE-2026-25292
Improper Validation of Syntactic Correctness of Input in Aut
V. Comments for CVE-2025-46419
No comments yet