https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T11:59:02.184989+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-23004 cnvd-2017-23004 2026-10-06T11:59:02.188483+00:00 cnvd-2017-23004 https://cve.radiocsirt.org/vuln/euvd-2026-77243 EUVD-2026-77243 2026-10-06T11:59:02.188519+00:00 EUVD-2026-77243 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12703 fkie_cve-2017-12703 2026-10-06T11:59:02.188534+00:00

A Cross-Site Request Forgery (CSRF) issue was discovered in Westermo MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0. The application does not verify whether a request was intentionally provided by the user, making it possible for an attacker to trick a user into making a malicious request to the server.

 https://cve.radiocsirt.org/vuln/ghsa-mm9p-vhg8-49hj GHSA-mm9p-vhg8-49hj 2026-10-06T11:59:02.188565+00:00

A Cross-Site Request Forgery (CSRF) issue was discovered in Westermo MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0. The application does not verify whether a request was intentionally provided by the user, making it possible for an attacker to trick a user into making a malicious request to the server.

 https://cve.radiocsirt.org/vuln/gsd-2017-12703 gsd-2017-12703 2026-10-06T11:59:02.188582+00:00 gsd-2017-12703 https://cve.radiocsirt.org/vuln/icsa-17-236-01 ICSA-17-236-01 — ICSA-17-236-01_Westermo MRD-305-DIN, MRD-315, MRD-355, and MRD-455 2026-10-06T11:59:02.188593+00:00

The application does not verify whether a request was intentionally provided by the user, making it possible for an attacker to trick a user into making a malicious request to the server.CVE-2017-12703 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The device utilizes hard-coded credentials, which could allow for unauthorized local low privileged access to the device.

CVE-2017-12709 has been assigned to this vulnerability. A CVSS v3 base score of 5.9 has been assigned; the CVSS vector string is (AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). The device utilizes hard-coded private cryptographic keys that may allow an attacker to decrypt traffic from any other source. CVE-2016-5816 has been assigned to this vulnerability. A CVSS v3 base score of 10.0 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N).