CVE-2025-46418 Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition

Description

Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition.

Affected products and versions

Product	Affected versions	Fixed in
WeOS 5.24	5.24 → latest	No fix stated

Other CVEs of WeOS

The 3 CVEs of WeOS →

CVE-2025-54319 An issue was discovered in Westermo WeOS 5 (5.24 through 5.24.4) 6.3 Medium CVE-2025-46419 Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet 5.9 Medium