CVE-2025-0630: Western Telematic Inc Console Server + Pdu Combo Unit Cpm Series

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Multiple Western Telematic (WTI) products contain a web interface that is vulnerable to a local file inclusion attack (LFI), where any authenticated user has privileged access to files on the device's filesystem.

Affected products

• Western Telematic Inc Console Server + Pdu Combo Unit Cpm Series: up to and including 6.62
• Western Telematic Inc Console Server Dsm Series: up to and including 6.62
• Western Telematic Inc Network Power Switch Nps Series: up to and including 6.62

Published 2025-02-04. Last modified 2026-06-17.