CVE-2018-19612

8.8 highEPSS 1.9%

The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allows remote users to upload malicious file types and execute ASP code.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2019-05-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

westermo:dr-250_firmware
westermo:dr-260_firmware
westermo:mr-260_firmware

References

https://github.com/TheWickerMan/CVE-Disclosures/blob/master/CVE-2018-19612.md
https://www.westermo.us/
https://github.com/TheWickerMan/CVE-Disclosures/blob/master/CVE-2018-19612.md
https://www.westermo.us/

Check your stack JSON