No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time. This vulnerability has a high attack complexity.
Credit: Westermo Network Technologies
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2025-46419 | CWE-1286 Improper Validation of Syntactic Correctness of Input | 5.9 Medium |
When configured for IPSec, a Westermo device running WeOS 5 could be vulnerable to a denial-of-service attack. A specifically crafted ESP packet could trigger an immediate reboot of the device. Vendor fix: Westermo recommends upgrading to the latest WeOS 5 version available. The vulnerability has been addressed and removed in WeOS 5 Version 5.24.0. This version is available for download on the Westermo Network Technologies support site. ↗ Mitigation: For more information refer to Westermo's security advisory Westermo-25-02. ↗ Affected, fixed & timelineAffected:
|
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
No coverage found in monitored research blogs or news feeds.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2025-46419 | 5.9 Medium | Westermo WeOS Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet. |
Named by the advisory itself. Each CVE links to its tracked detail page.
No KEV-catalogued vendors are named in this publication.