CVE-2025-0630CWE-73

Western Telematic Inc NPS Series, DSM Series, CPM Series External Control of File Name or Path

Medium · published February 4, 2025

CVSS v4.0
6.0
EPSS
0%
Percentile
35.6
In the wild
Unconfirmed
What it is

Multiple Western Telematic (WTI) products contain a web interface that is vulnerable to a local file inclusion attack (LFI), where any authenticated user has privileged access to files on the device's filesystem.

The record
Technical detail
CVSS v4.0
6.0 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00424 · 35.6th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2025-02-04T19:43Z
EPSS history
Timeline
  • 04 FEB 19:43Z
    Western Telematic Inc NPS Series, DSM Series, CPM Series External Control of File Name or Path
    cvelistv5