CVE-2017-12703: Westermo Mrd-305-Din Firmware

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A Cross-Site Request Forgery (CSRF) issue was discovered in Westermo MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0. The application does not verify whether a request was intentionally provided by the user, making it possible for an attacker to trick a user into making a malicious request to the server.

Affected products

• Westermo Mrd-305-Din Firmware: affected versions not specified
• Westermo Mrd-315-Din Firmware: affected versions not specified
• Westermo Mrd-355-Din Firmware: affected versions not specified
• Westermo Mrd-455-Din Firmware: affected versions not specified

Published 2017-08-25. Last modified 2026-06-17.