CVE-2025-0630 — Western Telematic Inc NPS Series, DSM Series, CPM Series External Control of File Name or Path

CVE-2025-0630

Western Telematic Inc NPS Series, DSM Series, CPM Series External Control of File Name or Path PUBLISHED

Description (CNA)

Multiple Western Telematic (WTI) products contain a web interface that is vulnerable to a local file inclusion attack (LFI), where any authenticated user has privileged access to files on the device's filesystem.

Affected (CNA)

Vendor / product	Versions
Western Telematic Inc / Network Power Switch (NPS Series)	affected 0 through 6.62
Western Telematic Inc / Console Server (DSM Series)	affected 0 through 6.62
Western Telematic Inc / Console Server + PDU Combo Unit (CPM Series)	affected 0 through 6.62

CWE

CWE-73

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.