CVE-2020-7227: Medium severity Westermo Mrd-315 Firmware vulnerability
Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows an authenticated remote attacker to retrieve the source code of different functions of the web application via requests that lack certain mandatory parameters. This affects ifaces-diag.asp, system.asp, backup.asp, sys-power.asp, ifaces-wls.asp, ifaces-wls-pkt.asp, and ifaces-wls-pkt-adv.asp.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for the information disclosure vulnerability in Westermo MRD-315 devices?
The vulnerability ID for the information disclosure vulnerability in Westermo MRD-315 devices is CVE-2020-7227.
What is the affected software version for the information disclosure vulnerability in Westermo MRD-315 devices?
The affected software versions for the information disclosure vulnerability in Westermo MRD-315 devices are 1.7.3 and 1.7.4.
How does the information disclosure vulnerability in Westermo MRD-315 devices work?
The information disclosure vulnerability in Westermo MRD-315 devices allows an authenticated remote attacker to retrieve the source code of different functions of the web application via requests that lack certain mandatory parameters.
What is the severity of CVE-2020-7227?
The severity of CVE-2020-7227 is medium with a CVSS score of 6.5.
How can I fix the information disclosure vulnerability in Westermo MRD-315 devices?
To fix the information disclosure vulnerability in Westermo MRD-315 devices, it is recommended to update to a patched version of the firmware provided by Westermo.