CVE-2020-7227

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-01-18 · updated 2026-06-17

Description

Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows an authenticated remote attacker to retrieve the source code of different functions of the web application via requests that lack certain mandatory parameters. This affects ifaces-diag.asp, system.asp, backup.asp, sys-power.asp, ifaces-wls.asp, ifaces-wls-pkt.asp, and ifaces-wls-pkt-adv.asp.

Affected products

Westermo Mrd-315 Firmware: 1.7.3, 1.7.4

References

https://sku11army.blogspot.com/2020/01/westermo-source-code-disclousure-in.html
https://sku11army.blogspot.com/2020/01/westermo-source-code-disclousure-in.html

Get alerted when CVE-2020-7227 or the next vulnerability affects your stack