Back to Database
Status published
Medium
CVE-2023-40544
Westermo Lynx Cleartext Transmission of Sensitive Information
Vulnerability Description
An attacker with access to the network where the affected devices are located could maliciously actions to obtain, via a sniffer, sensitive information exchanged via TCP communications.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-40544
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Aarón Flecha Menéndez, Iván Alonso Álvarez and Víctor Bello Cuevas reported these vulnerabilities to CISA.
More from Westermo
View All →CVE-2025-54319
An issue was discovered in Westermo WeOS 5 (5.24 through...
Medium
6.3
CVE-2025-46419
Westermo WeOS 5 through 5.23.0 allows a reboot via a...
Medium
5.9
CVE-2024-37183
Westermo L210-F2G Lynx Cleartext Transmission of Sensitive Information
Medium
6.9
CVE-2024-35246
Westermo L210-F2G Lynx Improper Control of Interaction Frequency
High
8.7
CVE-2024-32943
Westermo L210-F2G Lynx Improper Control of Interaction Frequency
High
8.7
Affected Vendor
Westermo
View all reports →Affected Software
Lynx
Vulnerable Versions:
L206-F2G1, 4.24
Timeline
Official Publish:
February 6th, 2024
Last Modified:
August 2nd, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N