Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-2qsh-g8jd-vbhr

Summary Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet.

Aliases

alias	CVE-2025-46419

Fixed_packages

Affected_packages

References

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2025-46419

reference_id

reference_type

scores

value	0.00213
scoring_system	epss
scoring_elements	0.43966
published_at	2026-06-11T12:55:00Z

value	0.00213
scoring_system	epss
scoring_elements	0.4412
published_at	2026-06-12T12:55:00Z

value	0.00213
scoring_system	epss
scoring_elements	0.44139
published_at	2026-06-13T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2025-46419

reference_url

https://www.westermo.com/-/media/Files/Cyber-security/westermo_sa_25-02_malformed_esp_packet_could_cause_denial_vulnerability_in_weos.pdf?rev=9af5c93194f343a0b4fad2d24d032df2&hash=87F4AD7F74C2BE69CA1B4C24F29B82EA

reference_id

westermo_sa_25-02_malformed_esp_packet_could_cause_denial_vulnerability_in_weos.pdf?rev=9af5c93194f343a0b4fad2d24d032df2&hash=87F4AD7F74C2BE69CA1B4C24F29B82EA

reference_type

scores

value	5.9
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-24T14:50:24Z/

url

Weaknesses

cwe_id	1286
name	Improper Validation of Syntactic Correctness of Input
description	The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax - but it does not validate or incorrectly validates that the input complies with the syntax.

Exploits

Severity_range_score 5.9 - 5.9

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2qsh-g8jd-vbhr

Vulnerability Instance