https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:02:05.440058+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-04980 bdu:2024-04980 2026-10-05T23:02:05.506482+00:00 bdu:2024-04980 https://cve.radiocsirt.org/vuln/euvd-2026-215823 EUVD-2026-215823 2026-10-05T23:02:05.506521+00:00 EUVD-2026-215823 https://cve.radiocsirt.org/vuln/fkie_cve-2024-36080 fkie_cve-2024-36080 2026-10-05T23:02:05.506536+00:00

Westermo EDW-100 devices through 2024-05-03 have a hidden root user account with a hardcoded password that cannot be changed. NOTE: this is a serial-to-Ethernet converter that should not be placed at the edge of the network.

 https://cve.radiocsirt.org/vuln/ghsa-r73q-v44r-mw6r GHSA-r73q-v44r-mw6r 2026-10-05T23:02:05.506565+00:00

Westermo EDW-100 devices through 2024-05-03 have a hidden root user account with a hardcoded password that cannot be changed. NOTE: this is a serial-to-Ethernet converter that should not be placed at the edge of the network.

 https://cve.radiocsirt.org/vuln/icsa-24-151-04 ICSA-24-151-04 — Westermo EDW-100 2026-10-05T23:02:05.506581+00:00

Westermo EDW-100 has a hidden administrator account with a hardcoded password. In the firmware package, in "image.bin", the username root and the password for this account are both hard-coded and exposed as strings that can trivially be extracted. Currently there is no way to change this password. Westermo EDW-100 allows an unauthenticated GET request that can download the configuration-file that contains the configuration, username, and passwords in clear-text.