CVE-2020-7227 - CVE House
Back to Database
Status published Medium CVE-2020-7227

Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure...

Vulnerability Description

Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows an authenticated remote attacker to retrieve the source code of different functions of the web application via requests that lack certain mandatory parameters. This affects ifaces-diag.asp, system.asp, backup.asp, sys-power.asp, ifaces-wls.asp, ifaces-wls-pkt.asp, and ifaces-wls-pkt-adv.asp.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-7227

Credits & Attribution

No credits recorded in the NVD database.

References

More from westermo

View All →
CVE-2018-19614
XSS exists in the /cmdexec/cmdexe?cmd= function in Westermo DR-250 Pre-5162...
Medium 6.1
CVE-2018-19613
Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF....
Medium 6.5
CVE-2018-19612
The /uploadfile? functionality in Westermo DR-250 Pre-5162 and DR-260 Pre-5162...
High 8.8
CVE-2016-5816
A Use of Hard-Coded Cryptographic Key issue was discovered in...
High 7.5
CVE-2015-7923
Westermo WeOS before 4.19.0 uses the same SSL private key...
Critical 9

Affected Vendor

Affected Software

mrd-315 firmware
Vulnerable Versions:
1.7.3, 1.7.4

Timeline

Official Publish: January 18th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.