# Recent vulnerabilities from Welotec GmbH

## [vde-2025-085](https://vulnerability.circl.lu/vuln/vde-2025-085)

```json
{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.first.org/cvss/v3.1/specification-document#Qualitative-Severity-Rating-Scale",
      "text": "High"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "A path traversal flaw in the SmartEMS upload handling allows authenticated users to direct upload data outside of the intended directory via the 'Upload-Key' header. In deployments where writable, code-interpreted paths are reachable, this may lead to remote code execution.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "An authenticated attacker with network access to the SmartEMS Web UI can write outside the intended upload directory, overwrite or place files in sensitive locations, escalate to remote code execution depending on filesystem permissions and execution context, and access or modify sensitive data.",
        "title": "Impact"
      },
      {
        "category": "details",
        "text": "Restrict access to the SmartEMS Web UI to trusted admin networks or VPN. Enforce strong credentials and rotate or revoke active tokens/sessions.",
        "title": "Mitigation"
      },
      {
        "category": "details",
        "text": "Update SmartEMS to version 3.3.6 which fixes the issue.",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "psirt@welotec.com",
      "name": "Welotec GmbH",
      "namespace": "https://welotec.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "Welotec PSIRT",
        "url": "https://welotec.com/de/pages/coordinated-vulnerability-disclosure-policy"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for Welotec",
        "url": "https://certvde.com/de/advisories/vendor/welotec"
      },
      {
        "category": "self",
        "summary": "VDE-2025-085: Welotec: Path Traversal in SmartEMS Upload Handling - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2025-085"
      },
      {
        "category": "self",
        "summary": "VDE-2025-085: Welotec: Path Traversal in SmartEMS Upload Handling - CSAF",
        "url": "https://welotec.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-085.json"
      }
    ],
    "title": "Welotec: Path Traversal in SmartEMS Upload Handling",
    "tracking": {
      "aliases": [
        "VDE-2025-085"
      ],
      "current_release_date": "2025-09-22T08:00:00.000Z",
      "generator": {
        "date": "2025-09-22T07:39:32.922Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.32"
        }
      },
      "id": "VDE-2025-085",
      "initial_release_date": "2025-09-10T07:00:00.000Z",
      "revision_history": [
        {
          "date": "2025-09-10T07:00:00.000Z",
          "number": "1.0.0",
          "summary": "Initial revision."
        },
        {
          "number": "1.0.1",
          "date": "2025-09-22T08:00:00.000Z",
          "summary": "Changes impact note categorie from details to description"
        }
      ],
      "status": "final",
      "version": "1.0.1"
    },
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination.",
        "urls": [
          "https://certvde.com"
        ]
      }
    ]
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SmartEMS Web Application",
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "<v3.3.6",
                    "product": {
                      "name": "Welotec Software SmartEMS Web Application <v3.3.6",
                      "product_id": "CSAFPID-51001"
                    }
                  },
                  {
                    "category": "product_version",
                    "name": "v3.3.6",
                    "product": {
                      "name": "Welotec Software SmartEMS Web Application v3.3.6",
                      "product_id": "CSAFPID-52001"
                    }
                  }
                ]
              }
            ],
            "category": "product_family",
            "name": "Software"
          }
        ],
        "category": "vendor",
        "name": "Welotec"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-41714",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"
      },
      "notes": [
        {
          "category": "description",
          "text": "The upload endpoint insufficiently validates the 'Upload-Key' request header. By supplying path traversal sequences, an authenticated attacker can cause the server to create upload-related artifacts outside the intended storage location. In certain configurations this enables arbitrary file write and may be leveraged to achieve remote code execution.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-51001"
        ],
        "fixed": [
          "CSAFPID-52001"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Restrict access to the SmartEMS Web UI to trusted admin networks/VPN. Enforce strong credentials and rotate or revoke active tokens/sessions.",
          "product_ids": [
            "CSAFPID-51001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update SmartEMS to version 3.3.6 or later.",
          "product_ids": [
            "CSAFPID-51001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1",
            "temporalScore": 8.8,
            "temporalSeverity": "HIGH",
            "environmentalScore": 8.8,
            "environmentalSeverity": "HIGH",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH"
          },
          "products": [
            "CSAFPID-51001"
          ]
        }
      ],
      "title": "Path Traversal via 'Upload-Key' in SmartEMS Upload Handling"
    }
  ]
}
```

## [vde-2025-076](https://vulnerability.circl.lu/vuln/vde-2025-076)

```json
{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.first.org/cvss/v3.1/specification-document#Qualitative-Severity-Rating-Scale",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "A hard-coded JWT secret in the egOS WebGUI backend is readable to the default user, allowing attackers to forge valid tokens and access protected API endpoints.",
        "title": "Summary"
      },
      {
        "category": "details",
        "text": "Attackers can impersonate any user (including administrators), modify configuration, upload firmware, reboot the device, and access sensitive logs.",
        "title": "Impact"
      },
      {
        "category": "details",
        "text": "Temporarily disable the WebGUI or restrict network access to the WebGUI to trusted admin stations.",
        "title": "Mitigation"
      },
      {
        "category": "details",
        "text": "Update egOS to version v1.7.7 or v1.8.2.\n\n| Product | Fixed Firmware |\n|---|---|\n| EG400Mk2-D11001-000101 | egOS v1.7.7 |\n| EG400Mk2-D11001-000101 | egOS v1.8.2 |\n| EG400Mk2-D11101-000101 | egOS v1.7.7 |\n| EG400Mk2-D11101-000101 | egOS v1.8.2 |\n| EG500Mk2-A11001-000101 | egOS v1.7.7 |\n| EG500Mk2-A11001-000101 | egOS v1.8.2 |\n| EG500Mk2-A11001-000201 | egOS v1.7.7 |\n| EG500Mk2-A11001-000201 | egOS v1.8.2 |\n| EG500Mk2-A11101-000101 | egOS v1.7.7 |\n| EG500Mk2-A11101-000101 | egOS v1.8.2 |\n| EG500Mk2-A12011-000101 | egOS v1.7.7 |\n| EG500Mk2-A12011-000101 | egOS v1.8.2 |\n| EG500Mk2-A21101-000101 | egOS v1.7.7 |\n| EG500Mk2-A21101-000101 | egOS v1.8.2 |\n| EG500Mk2-B11001-000101 | egOS v1.7.7 |\n| EG500Mk2-B11001-000101 | egOS v1.8.2 |\n| EG500Mk2-B11101-000101 | egOS v1.7.7 |\n| EG500Mk2-B11101-000101 | egOS v1.8.2 |\n| EG500Mk2-C11001-000101 | egOS v1.7.7 |\n| EG500Mk2-C11001-000101 | egOS v1.8.2 |\n| EG500Mk2-C11101-000101 | egOS v1.7.7 |\n| EG500Mk2-C11101-000101 | egOS v1.8.2 |\n| EG503L | egOS v1.7.7 |\n| EG503L | egOS v1.8.2 |\n| EG503L-G | egOS v1.7.7 |\n| EG503L-G | egOS v1.8.2 |\n| EG503L_4GB | egOS v1.7.7 |\n| EG503L_4GB | egOS v1.8.2 |\n| EG503W | egOS v1.7.7 |\n| EG503W | egOS v1.8.2 |\n| EG503W_4GB | egOS v1.7.7 |\n| EG503W_4GB | egOS v1.8.2 |\n| EG602L | egOS v1.7.7 |\n| EG602L | egOS v1.8.2 |\n| EG602W | egOS v1.7.7 |\n| EG602W | egOS v1.8.2 |\n| EG603L Mk2 | egOS v1.7.7 |\n| EG603L Mk2 | egOS v1.8.2 |\n| EG603W Mk2 | egOS v1.7.7 |\n| EG603W Mk2 | egOS v1.8.2 |\n| EG802W | egOS v1.7.7 |\n| EG802W | egOS v1.8.2 |\n| EG802W_i7_512GB_DinRail | egOS v1.7.7 |\n| EG802W_i7_512GB_DinRail | egOS v1.8.2 |\n| EG802W_i7_512GB_w/o DinRail | egOS v1.7.7 |\n| EG802W_i7_512GB_w/o DinRail | egOS v1.8.2 |\n| EG804W | egOS v1.7.7 |\n| EG804W | egOS v1.8.2 |\n| EG804W Pro | egOS v1.7.7 |\n| EG804W Pro | egOS v1.8.2 |",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "psirt@welotec.com",
      "name": "Welotec GmbH",
      "namespace": "https://welotec.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "Welotec PSIRT",
        "url": "https://welotec.com/de/pages/coordinated-vulnerability-disclosure-policy"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for Welotec",
        "url": "https://certvde.com/de/advisories/vendor/welotec"
      },
      {
        "category": "self",
        "summary": "VDE-2025-076: Welotec: Hard-coded JWT secret in egOS WebGUI - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2025-076"
      },
      {
        "category": "self",
        "summary": "VDE-2025-076: Welotec: Hard-coded JWT secret in egOS WebGUI - CSAF",
        "url": "https://welotec.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-076.json"
      }
    ],
    "title": "Welotec: Hard-coded JWT secret in egOS WebGUI",
    "tracking": {
      "aliases": [
        "VDE-2025-076"
      ],
      "current_release_date": "2025-08-26T07:00:00.000Z",
      "generator": {
        "date": "2025-08-25T14:54:30.890Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.33"
        }
      },
      "id": "VDE-2025-076",
      "initial_release_date": "2025-08-26T07:00:00.000Z",
      "revision_history": [
        {
          "date": "2025-08-26T07:00:00.000Z",
          "number": "1.0.0",
          "summary": "initial version"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    },
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      }
    ]
  },
  "product_tree": {
    "branches": [
      {
        "name": "Welotec",
        "category": "vendor",
        "branches": [
          {
            "name": "Hardware",
            "category": "product_family",
            "branches": [
              {
                "name": "EG400Mk2-D11001-000101",
                "category": "product_name",
                "product": {
                  "name": "EG400Mk2-D11001-000101",
                  "product_id": "p01",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100210"
                    ]
                  }
                }
              },
              {
                "name": "EG400Mk2-D11101-000101",
                "category": "product_name",
                "product": {
                  "name": "EG400Mk2-D11101-000101",
                  "product_id": "p02",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100580"
                    ]
                  }
                }
              },
              {
                "name": "EG503W",
                "category": "product_name",
                "product": {
                  "name": "EG503W",
                  "product_id": "p03",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100010"
                    ]
                  }
                }
              },
              {
                "name": "EG503L",
                "category": "product_name",
                "product": {
                  "name": "EG503L",
                  "product_id": "p04",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100020"
                    ]
                  }
                }
              },
              {
                "name": "EG503W_4GB",
                "category": "product_name",
                "product": {
                  "name": "EG503W_4GB",
                  "product_id": "p05",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100030"
                    ]
                  }
                }
              },
              {
                "name": "EG503L_4GB",
                "category": "product_name",
                "product": {
                  "name": "EG503L_4GB",
                  "product_id": "p06",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100040"
                    ]
                  }
                }
              },
              {
                "name": "EG503L-G",
                "category": "product_name",
                "product": {
                  "name": "EG503L-G",
                  "product_id": "p07",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100130"
                    ]
                  }
                }
              },
              {
                "name": "EG500Mk2-A11101-000101",
                "category": "product_name",
                "product": {
                  "name": "EG500Mk2-A11101-000101",
                  "product_id": "p08",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100160"
                    ]
                  }
                }
              },
              {
                "name": "EG500Mk2-A11001-000101",
                "category": "product_name",
                "product": {
                  "name": "EG500Mk2-A11001-000101",
                  "product_id": "p09",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100170"
                    ]
                  }
                }
              },
              {
                "name": "EG500Mk2-B11101-000101",
                "category": "product_name",
                "product": {
                  "name": "EG500Mk2-B11101-000101",
                  "product_id": "p10",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100180"
                    ]
                  }
                }
              },
              {
                "name": "EG500Mk2-B11001-000101",
                "category": "product_name",
                "product": {
                  "name": "EG500Mk2-B11001-000101",
                  "product_id": "p11",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100190"
                    ]
                  }
                }
              },
              {
                "name": "EG500Mk2-C11101-000101",
                "category": "product_name",
                "product": {
                  "name": "EG500Mk2-C11101-000101",
                  "product_id": "p12",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100260"
                    ]
                  }
                }
              },
              {
                "name": "EG500Mk2-C11001-000101",
                "category": "product_name",
                "product": {
                  "name": "EG500Mk2-C11001-000101",
                  "product_id": "p13",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100270"
                    ]
                  }
                }
              },
              {
                "name": "EG500Mk2-A12011-000101",
                "category": "product_name",
                "product": {
                  "name": "EG500Mk2-A12011-000101",
                  "product_id": "p14",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100280"
                    ]
                  }
                }
              },
              {
                "name": "EG500Mk2-A11001-000201",
                "category": "product_name",
                "product": {
                  "name": "EG500Mk2-A11001-000201",
                  "product_id": "p15",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100290"
                    ]
                  }
                }
              },
              {
                "name": "EG500Mk2-A21101-000101",
                "category": "product_name",
                "product": {
                  "name": "EG500Mk2-A21101-000101",
                  "product_id": "p16",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100650"
                    ]
                  }
                }
              },
              {
                "name": "EG602W",
                "category": "product_name",
                "product": {
                  "name": "EG602W",
                  "product_id": "p17",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG600100010"
                    ]
                  }
                }
              },
              {
                "name": "EG602L",
                "category": "product_name",
                "product": {
                  "name": "EG602L",
                  "product_id": "p18",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG600100020"
                    ]
                  }
                }
              },
              {
                "name": "EG603W Mk2",
                "category": "product_name",
                "product": {
                  "name": "EG603W Mk2",
                  "product_id": "p19",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG600100140"
                    ]
                  }
                }
              },
              {
                "name": "EG603L Mk2",
                "category": "product_name",
                "product": {
                  "name": "EG603L Mk2",
                  "product_id": "p20",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG600100150"
                    ]
                  }
                }
              },
              {
                "name": "EG802W",
                "category": "product_name",
                "product": {
                  "name": "EG802W",
                  "product_id": "p21",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG800100010"
                    ]
                  }
                }
              },
              {
                "name": "EG804W",
                "category": "product_name",
                "product": {
                  "name": "EG804W",
                  "product_id": "p22",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG800100020"
                    ]
                  }
                }
              },
              {
                "name": "EG802W_i7_512GB_DinRail",
                "category": "product_name",
                "product": {
                  "name": "EG802W_i7_512GB_DinRail",
                  "product_id": "p23",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG800100040"
                    ]
                  }
                }
              },
              {
                "name": "EG802W_i7_512GB_w/o DinRail",
                "category": "product_name",
                "product": {
                  "name": "EG802W_i7_512GB_w/o DinRail",
                  "product_id": "p24",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG800100050"
                    ]
                  }
                }
              },
              {
                "name": "EG804W Pro",
                "category": "product_name",
                "product": {
                  "name": "EG804W Pro",
                  "product_id": "p25",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG800100090"
                    ]
                  }
                }
              }
            ]
          },
          {
            "name": "Firmware",
            "category": "product_family",
            "branches": [
              {
                "name": "<v1.7.7",
                "category": "product_version_range",
                "product": {
                  "name": "egOS <v1.7.7",
                  "product_id": "fw-21001"
                }
              },
              {
                "name": "v1.8.0<v1.8.2",
                "category": "product_version_range",
                "product": {
                  "name": "egOS v1.8.0<v1.8.2",
                  "product_id": "fw-21002"
                }
              },
              {
                "name": "v1.7.7",
                "category": "product_version",
                "product": {
                  "name": "egOS v1.7.7",
                  "product_id": "fw-22001"
                }
              },
              {
                "name": "v1.8.2",
                "category": "product_version",
                "product": {
                  "name": "egOS v1.8.2",
                  "product_id": "fw-22002"
                }
              }
            ]
          }
        ]
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "summary": "Affected products: egOS < v1.7.7.",
        "product_ids": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31005",
          "CSAFPID-31006",
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010",
          "CSAFPID-31011",
          "CSAFPID-31012",
          "CSAFPID-31013",
          "CSAFPID-31014",
          "CSAFPID-31015",
          "CSAFPID-31016",
          "CSAFPID-31017",
          "CSAFPID-31018",
          "CSAFPID-31019",
          "CSAFPID-31020",
          "CSAFPID-31021",
          "CSAFPID-31022",
          "CSAFPID-31023",
          "CSAFPID-31024",
          "CSAFPID-31025"
        ]
      },
      {
        "group_id": "CSAFGID-0003",
        "summary": "Affected products: egOS v1.8.0<v1.8.2.",
        "product_ids": [
          "CSAFPID-31026",
          "CSAFPID-31027",
          "CSAFPID-31028",
          "CSAFPID-31029",
          "CSAFPID-31030",
          "CSAFPID-31031",
          "CSAFPID-31032",
          "CSAFPID-31033",
          "CSAFPID-31034",
          "CSAFPID-31035",
          "CSAFPID-31036",
          "CSAFPID-31037",
          "CSAFPID-31038",
          "CSAFPID-31039",
          "CSAFPID-31040",
          "CSAFPID-31041",
          "CSAFPID-31042",
          "CSAFPID-31043",
          "CSAFPID-31044",
          "CSAFPID-31045",
          "CSAFPID-31046",
          "CSAFPID-31047",
          "CSAFPID-31048",
          "CSAFPID-31049",
          "CSAFPID-31050"
        ]
      },
      {
        "group_id": "CSAFGID-0002",
        "summary": "Fixed products: egOS v1.7.7.",
        "product_ids": [
          "CSAFPID-32001",
          "CSAFPID-32002",
          "CSAFPID-32003",
          "CSAFPID-32004",
          "CSAFPID-32005",
          "CSAFPID-32006",
          "CSAFPID-32007",
          "CSAFPID-32008",
          "CSAFPID-32009",
          "CSAFPID-32010",
          "CSAFPID-32011",
          "CSAFPID-32012",
          "CSAFPID-32013",
          "CSAFPID-32014",
          "CSAFPID-32015",
          "CSAFPID-32016",
          "CSAFPID-32017",
          "CSAFPID-32018",
          "CSAFPID-32019",
          "CSAFPID-32020",
          "CSAFPID-32021",
          "CSAFPID-32022",
          "CSAFPID-32023",
          "CSAFPID-32024",
          "CSAFPID-32025"
        ]
      },
      {
        "group_id": "CSAFGID-0004",
        "summary": "Fixed products: egOS v1.8.2.",
        "product_ids": [
          "CSAFPID-32026",
          "CSAFPID-32027",
          "CSAFPID-32028",
          "CSAFPID-32029",
          "CSAFPID-32030",
          "CSAFPID-32031",
          "CSAFPID-32032",
          "CSAFPID-32033",
          "CSAFPID-32034",
          "CSAFPID-32035",
          "CSAFPID-32036",
          "CSAFPID-32037",
          "CSAFPID-32038",
          "CSAFPID-32039",
          "CSAFPID-32040",
          "CSAFPID-32041",
          "CSAFPID-32042",
          "CSAFPID-32043",
          "CSAFPID-32044",
          "CSAFPID-32045",
          "CSAFPID-32046",
          "CSAFPID-32047",
          "CSAFPID-32048",
          "CSAFPID-32049",
          "CSAFPID-32050"
        ]
      }
    ],
    "relationships": [
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p01",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG400Mk2-D11001-000101",
          "product_id": "CSAFPID-31001"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p02",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG400Mk2-D11101-000101",
          "product_id": "CSAFPID-31002"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p03",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG503W",
          "product_id": "CSAFPID-31003"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p04",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG503L",
          "product_id": "CSAFPID-31004"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p05",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG503W_4GB",
          "product_id": "CSAFPID-31005"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p06",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG503L_4GB",
          "product_id": "CSAFPID-31006"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p07",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG503L-G",
          "product_id": "CSAFPID-31007"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p08",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG500Mk2-A11101-000101",
          "product_id": "CSAFPID-31008"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p09",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG500Mk2-A11001-000101",
          "product_id": "CSAFPID-31009"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p10",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG500Mk2-B11101-000101",
          "product_id": "CSAFPID-31010"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p11",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG500Mk2-B11001-000101",
          "product_id": "CSAFPID-31011"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p12",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG500Mk2-C11101-000101",
          "product_id": "CSAFPID-31012"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p13",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG500Mk2-C11001-000101",
          "product_id": "CSAFPID-31013"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p14",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG500Mk2-A12011-000101",
          "product_id": "CSAFPID-31014"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p15",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG500Mk2-A11001-000201",
          "product_id": "CSAFPID-31015"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p16",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG500Mk2-A21101-000101",
          "product_id": "CSAFPID-31016"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p17",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG602W",
          "product_id": "CSAFPID-31017"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p18",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG602L",
          "product_id": "CSAFPID-31018"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p19",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG603W Mk2",
          "product_id": "CSAFPID-31019"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p20",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG603L Mk2",
          "product_id": "CSAFPID-31020"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p21",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG802W",
          "product_id": "CSAFPID-31021"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p22",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG804W",
          "product_id": "CSAFPID-31022"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p23",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG802W_i7_512GB_DinRail",
          "product_id": "CSAFPID-31023"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p24",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG802W_i7_512GB_w/o DinRail",
          "product_id": "CSAFPID-31024"
        }
      },
      {
        "product_reference": "fw-21001",
        "relates_to_product_reference": "p25",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS <v1.7.7 installed on EG804W Pro",
          "product_id": "CSAFPID-31025"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p01",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG400Mk2-D11001-000101",
          "product_id": "CSAFPID-31026"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p02",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG400Mk2-D11101-000101",
          "product_id": "CSAFPID-31027"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p03",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG503W",
          "product_id": "CSAFPID-31028"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p04",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG503L",
          "product_id": "CSAFPID-31029"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p05",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG503W_4GB",
          "product_id": "CSAFPID-31030"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p06",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG503L_4GB",
          "product_id": "CSAFPID-31031"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p07",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG503L-G",
          "product_id": "CSAFPID-31032"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p08",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG500Mk2-A11101-000101",
          "product_id": "CSAFPID-31033"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p09",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG500Mk2-A11001-000101",
          "product_id": "CSAFPID-31034"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p10",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG500Mk2-B11101-000101",
          "product_id": "CSAFPID-31035"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p11",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG500Mk2-B11001-000101",
          "product_id": "CSAFPID-31036"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p12",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG500Mk2-C11101-000101",
          "product_id": "CSAFPID-31037"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p13",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG500Mk2-C11001-000101",
          "product_id": "CSAFPID-31038"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p14",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG500Mk2-A12011-000101",
          "product_id": "CSAFPID-31039"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p15",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG500Mk2-A11001-000201",
          "product_id": "CSAFPID-31040"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p16",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG500Mk2-A21101-000101",
          "product_id": "CSAFPID-31041"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p17",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG602W",
          "product_id": "CSAFPID-31042"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p18",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG602L",
          "product_id": "CSAFPID-31043"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p19",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG603W Mk2",
          "product_id": "CSAFPID-31044"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p20",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG603L Mk2",
          "product_id": "CSAFPID-31045"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p21",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG802W",
          "product_id": "CSAFPID-31046"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p22",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG804W",
          "product_id": "CSAFPID-31047"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p23",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG802W_i7_512GB_DinRail",
          "product_id": "CSAFPID-31048"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p24",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG802W_i7_512GB_w/o DinRail",
          "product_id": "CSAFPID-31049"
        }
      },
      {
        "product_reference": "fw-21002",
        "relates_to_product_reference": "p25",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.0<v1.8.2 installed on EG804W Pro",
          "product_id": "CSAFPID-31050"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p01",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG400Mk2-D11001-000101",
          "product_id": "CSAFPID-32001"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p02",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG400Mk2-D11101-000101",
          "product_id": "CSAFPID-32002"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p03",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG503W",
          "product_id": "CSAFPID-32003"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p04",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG503L",
          "product_id": "CSAFPID-32004"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p05",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG503W_4GB",
          "product_id": "CSAFPID-32005"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p06",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG503L_4GB",
          "product_id": "CSAFPID-32006"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p07",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG503L-G",
          "product_id": "CSAFPID-32007"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p08",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG500Mk2-A11101-000101",
          "product_id": "CSAFPID-32008"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p09",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG500Mk2-A11001-000101",
          "product_id": "CSAFPID-32009"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p10",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG500Mk2-B11101-000101",
          "product_id": "CSAFPID-32010"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p11",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG500Mk2-B11001-000101",
          "product_id": "CSAFPID-32011"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p12",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG500Mk2-C11101-000101",
          "product_id": "CSAFPID-32012"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p13",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG500Mk2-C11001-000101",
          "product_id": "CSAFPID-32013"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p14",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG500Mk2-A12011-000101",
          "product_id": "CSAFPID-32014"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p15",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG500Mk2-A11001-000201",
          "product_id": "CSAFPID-32015"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p16",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG500Mk2-A21101-000101",
          "product_id": "CSAFPID-32016"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p17",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG602W",
          "product_id": "CSAFPID-32017"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p18",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG602L",
          "product_id": "CSAFPID-32018"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p19",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG603W Mk2",
          "product_id": "CSAFPID-32019"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p20",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG603L Mk2",
          "product_id": "CSAFPID-32020"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p21",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG802W",
          "product_id": "CSAFPID-32021"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p22",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG804W",
          "product_id": "CSAFPID-32022"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p23",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG802W_i7_512GB_DinRail",
          "product_id": "CSAFPID-32023"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p24",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG802W_i7_512GB w/o DinRail",
          "product_id": "CSAFPID-32024"
        }
      },
      {
        "product_reference": "fw-22001",
        "relates_to_product_reference": "p25",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.7.7 installed on EG804W Pro",
          "product_id": "CSAFPID-32025"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p01",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG400Mk2-D11001-000101",
          "product_id": "CSAFPID-32026"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p02",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG400Mk2-D11101-000101",
          "product_id": "CSAFPID-32027"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p03",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG503W",
          "product_id": "CSAFPID-32028"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p04",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG503L",
          "product_id": "CSAFPID-32029"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p05",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG503W_4GB",
          "product_id": "CSAFPID-32030"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p06",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG503L_4GB",
          "product_id": "CSAFPID-32031"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p07",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG503L-G",
          "product_id": "CSAFPID-32032"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p08",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG500Mk2-A11101-000101",
          "product_id": "CSAFPID-32033"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p09",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG500Mk2-A11001-000101",
          "product_id": "CSAFPID-32034"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p10",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG500Mk2-B11101-000101",
          "product_id": "CSAFPID-32035"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p11",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG500Mk2-B11001-000101",
          "product_id": "CSAFPID-32036"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p12",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG500Mk2-C11101-000101",
          "product_id": "CSAFPID-32037"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p13",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG500Mk2-C11001-000101",
          "product_id": "CSAFPID-32038"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p14",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG500Mk2-A12011-000101",
          "product_id": "CSAFPID-32039"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p15",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG500Mk2-A11001-000201",
          "product_id": "CSAFPID-32040"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p16",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG500Mk2-A21101-000101",
          "product_id": "CSAFPID-32041"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p17",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG602W",
          "product_id": "CSAFPID-32042"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p18",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG602L",
          "product_id": "CSAFPID-32043"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p19",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG603W Mk2",
          "product_id": "CSAFPID-32044"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p20",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG603L Mk2",
          "product_id": "CSAFPID-32045"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p21",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG802W",
          "product_id": "CSAFPID-32046"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p22",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG804W",
          "product_id": "CSAFPID-32047"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p23",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG802W_i7_512GB_DinRail",
          "product_id": "CSAFPID-32048"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p24",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG802W_i7_512GB w/o DinRail",
          "product_id": "CSAFPID-32049"
        }
      },
      {
        "product_reference": "fw-22002",
        "relates_to_product_reference": "p25",
        "category": "installed_on",
        "full_product_name": {
          "name": "egOS v1.8.2 installed on EG804W Pro",
          "product_id": "CSAFPID-32050"
        }
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-41702",
      "cwe": {
        "id": "CWE-321",
        "name": "Use of Hard-coded Cryptographic Key"
      },
      "notes": [
        {
          "category": "description",
          "text": "The JWT secret key is embedded in the egOS WebGUI backend and is readable to the default user. An unauthenticated remote attacker can generate valid HS256 tokens and bypass authentication/authorization due to the use of hard-coded cryptographic key.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31005",
          "CSAFPID-31006",
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010",
          "CSAFPID-31011",
          "CSAFPID-31012",
          "CSAFPID-31013",
          "CSAFPID-31014",
          "CSAFPID-31015",
          "CSAFPID-31016",
          "CSAFPID-31017",
          "CSAFPID-31018",
          "CSAFPID-31019",
          "CSAFPID-31020",
          "CSAFPID-31021",
          "CSAFPID-31022",
          "CSAFPID-31023",
          "CSAFPID-31024",
          "CSAFPID-31025",
          "CSAFPID-31026",
          "CSAFPID-31027",
          "CSAFPID-31028",
          "CSAFPID-31029",
          "CSAFPID-31030",
          "CSAFPID-31031",
          "CSAFPID-31032",
          "CSAFPID-31033",
          "CSAFPID-31034",
          "CSAFPID-31035",
          "CSAFPID-31036",
          "CSAFPID-31037",
          "CSAFPID-31038",
          "CSAFPID-31039",
          "CSAFPID-31040",
          "CSAFPID-31041",
          "CSAFPID-31042",
          "CSAFPID-31043",
          "CSAFPID-31044",
          "CSAFPID-31045",
          "CSAFPID-31046",
          "CSAFPID-31047",
          "CSAFPID-31048",
          "CSAFPID-31049",
          "CSAFPID-31050"
        ],
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002",
          "CSAFPID-32003",
          "CSAFPID-32004",
          "CSAFPID-32005",
          "CSAFPID-32006",
          "CSAFPID-32007",
          "CSAFPID-32008",
          "CSAFPID-32009",
          "CSAFPID-32010",
          "CSAFPID-32011",
          "CSAFPID-32012",
          "CSAFPID-32013",
          "CSAFPID-32014",
          "CSAFPID-32015",
          "CSAFPID-32016",
          "CSAFPID-32017",
          "CSAFPID-32018",
          "CSAFPID-32019",
          "CSAFPID-32020",
          "CSAFPID-32021",
          "CSAFPID-32022",
          "CSAFPID-32023",
          "CSAFPID-32024",
          "CSAFPID-32025",
          "CSAFPID-32026",
          "CSAFPID-32027",
          "CSAFPID-32028",
          "CSAFPID-32029",
          "CSAFPID-32030",
          "CSAFPID-32031",
          "CSAFPID-32032",
          "CSAFPID-32033",
          "CSAFPID-32034",
          "CSAFPID-32035",
          "CSAFPID-32036",
          "CSAFPID-32037",
          "CSAFPID-32038",
          "CSAFPID-32039",
          "CSAFPID-32040",
          "CSAFPID-32041",
          "CSAFPID-32042",
          "CSAFPID-32043",
          "CSAFPID-32044",
          "CSAFPID-32045",
          "CSAFPID-32046",
          "CSAFPID-32047",
          "CSAFPID-32048",
          "CSAFPID-32049",
          "CSAFPID-32050"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Temporarily disable the WebGUI or restrict network access to the WebGUI to trusted admin stations.",
          "group_ids": [
            "CSAFGID-0001",
            "CSAFGID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update egOS to version v1.7.7 or v1.8.2.",
          "group_ids": [
            "CSAFGID-0001",
            "CSAFGID-0003"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004",
            "CSAFPID-31005",
            "CSAFPID-31006",
            "CSAFPID-31007",
            "CSAFPID-31008",
            "CSAFPID-31009",
            "CSAFPID-31010",
            "CSAFPID-31011",
            "CSAFPID-31012",
            "CSAFPID-31013",
            "CSAFPID-31014",
            "CSAFPID-31015",
            "CSAFPID-31016",
            "CSAFPID-31017",
            "CSAFPID-31018",
            "CSAFPID-31019",
            "CSAFPID-31020",
            "CSAFPID-31021",
            "CSAFPID-31022",
            "CSAFPID-31023",
            "CSAFPID-31024",
            "CSAFPID-31025",
            "CSAFPID-31026",
            "CSAFPID-31027",
            "CSAFPID-31028",
            "CSAFPID-31029",
            "CSAFPID-31030",
            "CSAFPID-31031",
            "CSAFPID-31032",
            "CSAFPID-31033",
            "CSAFPID-31034",
            "CSAFPID-31035",
            "CSAFPID-31036",
            "CSAFPID-31037",
            "CSAFPID-31038",
            "CSAFPID-31039",
            "CSAFPID-31040",
            "CSAFPID-31041",
            "CSAFPID-31042",
            "CSAFPID-31043",
            "CSAFPID-31044",
            "CSAFPID-31045",
            "CSAFPID-31046",
            "CSAFPID-31047",
            "CSAFPID-31048",
            "CSAFPID-31049",
            "CSAFPID-31050"
          ]
        }
      ],
      "title": "CVE-2025-41702"
    }
  ]
}
```

## [vde-2024-009](https://vulnerability.circl.lu/vuln/vde-2024-009)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "organization": "BSI",
        "summary": "reporting",
        "urls": [
          "https://www.bsi.bund.de/"
        ]
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "Welotec has closed two vulnerabilities in the TK500v1 router series and advises to update the routers to firmware version r5542 or later. An exploitation of the vulnerabilities can allow an attacker to manipulate the device.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "Update the product to firmware v2.3.0.r5542 or later.",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "psirt@welotec.com",
      "name": "Welotec GmbH",
      "namespace": "https://welotec.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "Welotec Coordinated Vulnerability Disclosure Policy.",
        "url": "https://www.welotec.com/coordinated-vulnerability-disclosure-policy/"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for Welotec products.",
        "url": "https://certvde.com/en/advisories/vendor/welotec/"
      },
      {
        "category": "self",
        "summary": "VDE-2024-009: Welotec: Two vulnerabilities in TK500v1 router series - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2024-009/"
      },
      {
        "summary": "VDE-2024-009: Welotec: Two vulnerabilities in TK500v1 router series - CSAF",
        "url": "https://welotec.csaf-tp.certvde.com/.well-known/csaf/white/2024/vde-2024-009.json",
        "category": "self"
      }
    ],
    "title": "Welotec: Two vulnerabilities in TK500v1 router series",
    "tracking": {
      "aliases": [
        "VDE-2024-009"
      ],
      "current_release_date": "2025-05-14T12:28:19.000Z",
      "generator": {
        "date": "2024-06-04T14:36:24.058Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.4"
        }
      },
      "id": "VDE-2024-009",
      "initial_release_date": "2024-04-09T08:00:00.000Z",
      "revision_history": [
        {
          "date": "2023-06-07T10:00:00.000Z",
          "number": "1",
          "summary": "initial revision"
        },
        {
          "date": "2024-06-04T10:00:00.000Z",
          "number": "2",
          "summary": "Minor typo changes.\nReorder Products and Branches.\nDuplicate remediation from document notes to the vulnerabilities."
        },
        {
          "date": "2024-11-06T11:27:01.000Z",
          "number": "3",
          "summary": "Fix: correct certvde domain, added self-reference"
        },
        {
          "number": "4",
          "summary": "Fix: firmware category, added distribution, version space",
          "date": "2025-05-14T12:28:19.000Z"
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "branches": [
                  {
                    "branches": [
                      {
                        "category": "product_name",
                        "name": "TK525L",
                        "product": {
                          "name": "Welotec Hardware Router TK500v1 TK525L",
                          "product_id": "CSAFPID-1101",
                          "product_identification_helper": {
                            "model_numbers": [
                              "6912TK525L00"
                            ]
                          }
                        }
                      },
                      {
                        "category": "product_name",
                        "name": "TK515L",
                        "product": {
                          "name": "Welotec Hardware Router TK500v1 TK515L",
                          "product_id": "CSAFPID-1102",
                          "product_identification_helper": {
                            "model_numbers": [
                              "6912TK515L00"
                            ]
                          }
                        }
                      },
                      {
                        "category": "product_name",
                        "name": "TK525L Set",
                        "product": {
                          "name": "Welotec Hardware Router TK500v1 TK525L Set",
                          "product_id": "CSAFPID-1103",
                          "product_identification_helper": {
                            "model_numbers": [
                              "6912TK525L0S"
                            ]
                          }
                        }
                      },
                      {
                        "category": "product_name",
                        "name": "TK525L-W Set",
                        "product": {
                          "name": "Welotec Hardware Router TK500v1 TK525L-W Set",
                          "product_id": "CSAFPID-1104",
                          "product_identification_helper": {
                            "model_numbers": [
                              "6912TK525LS"
                            ]
                          }
                        }
                      },
                      {
                        "category": "product_name",
                        "name": "TK525L-W",
                        "product": {
                          "name": "Welotec Hardware Router TK500v1 TK525L-W",
                          "product_id": "CSAFPID-1105",
                          "product_identification_helper": {
                            "model_numbers": [
                              "6912TK525LW"
                            ]
                          }
                        }
                      },
                      {
                        "category": "product_name",
                        "name": "TK525U Set",
                        "product": {
                          "name": "Welotec Hardware Router TK500v1 TK525U Set",
                          "product_id": "CSAFPID-1106",
                          "product_identification_helper": {
                            "model_numbers": [
                              "6912TK525U0S"
                            ]
                          }
                        }
                      },
                      {
                        "category": "product_name",
                        "name": "TK525U",
                        "product": {
                          "name": "Welotec Hardware Router TK500v1 TK525U",
                          "product_id": "CSAFPID-1107",
                          "product_identification_helper": {
                            "model_numbers": [
                              "6912TK525U00"
                            ]
                          }
                        }
                      },
                      {
                        "category": "product_name",
                        "name": "TK525W Set",
                        "product": {
                          "name": "Welotec Hardware Router TK500v1 TK525W Set",
                          "product_id": "CSAFPID-1108",
                          "product_identification_helper": {
                            "model_numbers": [
                              "6912TK525W0S"
                            ]
                          }
                        }
                      },
                      {
                        "category": "product_name",
                        "name": "TK525W",
                        "product": {
                          "name": "Welotec Hardware Router TK500v1 TK525W",
                          "product_id": "CSAFPID-1109",
                          "product_identification_helper": {
                            "model_numbers": [
                              "6912TK525W00"
                            ]
                          }
                        }
                      },
                      {
                        "category": "product_name",
                        "name": "TK515L-W Set",
                        "product": {
                          "name": "Welotec Hardware Router TK500v1 TK515L-W Set",
                          "product_id": "CSAFPID-1110",
                          "product_identification_helper": {
                            "model_numbers": [
                              "6912TK515WS"
                            ]
                          }
                        }
                      },
                      {
                        "category": "product_name",
                        "name": "TK535L1 Set",
                        "product": {
                          "name": "Welotec Hardware Router TK500v1 TK535L1 Set",
                          "product_id": "CSAFPID-1111",
                          "product_identification_helper": {
                            "model_numbers": [
                              "6912TK535L0S"
                            ]
                          }
                        }
                      },
                      {
                        "category": "product_name",
                        "name": "TK515L-W",
                        "product": {
                          "name": "Welotec Hardware Router TK500v1 TK515L-W",
                          "product_id": "CSAFPID-1112",
                          "product_identification_helper": {
                            "model_numbers": [
                              "6912TK515WS"
                            ]
                          }
                        }
                      },
                      {
                        "category": "product_name",
                        "name": "TK535L1",
                        "product": {
                          "name": "Welotec Hardware Router TK500v1 TK535L1",
                          "product_id": "CSAFPID-1113",
                          "product_identification_helper": {
                            "model_numbers": [
                              "6912TK535L00"
                            ]
                          }
                        }
                      },
                      {
                        "category": "product_name",
                        "name": "TK515L Set",
                        "product": {
                          "name": "Welotec Hardware Router TK500v1 TK515L Set",
                          "product_id": "CSAFPID-1114",
                          "product_identification_helper": {
                            "model_numbers": [
                              "6912TK515L0S"
                            ]
                          }
                        }
                      }
                    ],
                    "category": "product_family",
                    "name": "TK500v1"
                  }
                ],
                "category": "product_family",
                "name": "Router"
              }
            ],
            "category": "product_family",
            "name": "Hardware"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "branches": [
                      {
                        "category": "product_version_range",
                        "name": "<v2.3.0.r5542",
                        "product": {
                          "name": "Welotec Firmware Router TK500v1 <v2.3.0.r5542",
                          "product_id": "CSAFPID-2101"
                        }
                      },
                      {
                        "category": "product_version",
                        "name": "v2.3.0.r5542",
                        "product": {
                          "name": "Welotec Firmware Router TK500v1 v2.3.0.r5542",
                          "product_id": "CSAFPID-2201"
                        }
                      }
                    ],
                    "category": "product_family",
                    "name": "TK500v1"
                  }
                ],
                "category": "product_family",
                "name": "Router"
              }
            ],
            "category": "product_family",
            "name": "Firmware"
          }
        ],
        "category": "vendor",
        "name": "Welotec"
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-3101",
          "CSAFPID-3102",
          "CSAFPID-3103",
          "CSAFPID-3104",
          "CSAFPID-3105",
          "CSAFPID-3106",
          "CSAFPID-3107",
          "CSAFPID-3108",
          "CSAFPID-3109",
          "CSAFPID-3110",
          "CSAFPID-3111",
          "CSAFPID-3112",
          "CSAFPID-3113",
          "CSAFPID-3114"
        ],
        "summary": "Affected products."
      },
      {
        "group_id": "CSAFGID-0002",
        "product_ids": [
          "CSAFPID-3201",
          "CSAFPID-3202",
          "CSAFPID-3203",
          "CSAFPID-3204",
          "CSAFPID-3205",
          "CSAFPID-3206",
          "CSAFPID-3207",
          "CSAFPID-3208",
          "CSAFPID-3209",
          "CSAFPID-3210",
          "CSAFPID-3211",
          "CSAFPID-3212",
          "CSAFPID-3213",
          "CSAFPID-3214"
        ],
        "summary": "Fixed products."
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 <v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK525L",
          "product_id": "CSAFPID-3101"
        },
        "product_reference": "CSAFPID-2101",
        "relates_to_product_reference": "CSAFPID-1101"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 <v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK515L",
          "product_id": "CSAFPID-3102"
        },
        "product_reference": "CSAFPID-2101",
        "relates_to_product_reference": "CSAFPID-1102"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 <v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK525L Set",
          "product_id": "CSAFPID-3103"
        },
        "product_reference": "CSAFPID-2101",
        "relates_to_product_reference": "CSAFPID-1103"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 <v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK525L-W Set",
          "product_id": "CSAFPID-3104"
        },
        "product_reference": "CSAFPID-2101",
        "relates_to_product_reference": "CSAFPID-1104"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 <v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK525L-W",
          "product_id": "CSAFPID-3105"
        },
        "product_reference": "CSAFPID-2101",
        "relates_to_product_reference": "CSAFPID-1105"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 <v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK525U Set",
          "product_id": "CSAFPID-3106"
        },
        "product_reference": "CSAFPID-2101",
        "relates_to_product_reference": "CSAFPID-1106"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 <v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK525U",
          "product_id": "CSAFPID-3107"
        },
        "product_reference": "CSAFPID-2101",
        "relates_to_product_reference": "CSAFPID-1107"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 <v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK525W Set",
          "product_id": "CSAFPID-3108"
        },
        "product_reference": "CSAFPID-2101",
        "relates_to_product_reference": "CSAFPID-1108"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 <v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK525W",
          "product_id": "CSAFPID-3109"
        },
        "product_reference": "CSAFPID-2101",
        "relates_to_product_reference": "CSAFPID-1109"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 <v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK515L-W Set",
          "product_id": "CSAFPID-3110"
        },
        "product_reference": "CSAFPID-2101",
        "relates_to_product_reference": "CSAFPID-1110"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 <v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK535L1 Set",
          "product_id": "CSAFPID-3111"
        },
        "product_reference": "CSAFPID-2101",
        "relates_to_product_reference": "CSAFPID-1111"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 <v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK515L-W",
          "product_id": "CSAFPID-3112"
        },
        "product_reference": "CSAFPID-2101",
        "relates_to_product_reference": "CSAFPID-1112"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 <v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK535L1",
          "product_id": "CSAFPID-3113"
        },
        "product_reference": "CSAFPID-2101",
        "relates_to_product_reference": "CSAFPID-1113"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 <v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK515L Set",
          "product_id": "CSAFPID-3114"
        },
        "product_reference": "CSAFPID-2101",
        "relates_to_product_reference": "CSAFPID-1114"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK525L",
          "product_id": "CSAFPID-3201"
        },
        "product_reference": "CSAFPID-2201",
        "relates_to_product_reference": "CSAFPID-1101"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK515L",
          "product_id": "CSAFPID-3202"
        },
        "product_reference": "CSAFPID-2201",
        "relates_to_product_reference": "CSAFPID-1102"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK525L Set",
          "product_id": "CSAFPID-3203"
        },
        "product_reference": "CSAFPID-2201",
        "relates_to_product_reference": "CSAFPID-1103"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK525L-W Set",
          "product_id": "CSAFPID-3204"
        },
        "product_reference": "CSAFPID-2201",
        "relates_to_product_reference": "CSAFPID-1104"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK525L-W",
          "product_id": "CSAFPID-3205"
        },
        "product_reference": "CSAFPID-2201",
        "relates_to_product_reference": "CSAFPID-1105"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK525U Set",
          "product_id": "CSAFPID-3206"
        },
        "product_reference": "CSAFPID-2201",
        "relates_to_product_reference": "CSAFPID-1106"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK525U",
          "product_id": "CSAFPID-3207"
        },
        "product_reference": "CSAFPID-2201",
        "relates_to_product_reference": "CSAFPID-1107"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK525W Set",
          "product_id": "CSAFPID-3208"
        },
        "product_reference": "CSAFPID-2201",
        "relates_to_product_reference": "CSAFPID-1108"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK525W",
          "product_id": "CSAFPID-3209"
        },
        "product_reference": "CSAFPID-2201",
        "relates_to_product_reference": "CSAFPID-1109"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK515L-W Set",
          "product_id": "CSAFPID-3210"
        },
        "product_reference": "CSAFPID-2201",
        "relates_to_product_reference": "CSAFPID-1110"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK535L1 Set",
          "product_id": "CSAFPID-3211"
        },
        "product_reference": "CSAFPID-2201",
        "relates_to_product_reference": "CSAFPID-1111"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK515L-W",
          "product_id": "CSAFPID-3212"
        },
        "product_reference": "CSAFPID-2201",
        "relates_to_product_reference": "CSAFPID-1112"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK535L1",
          "product_id": "CSAFPID-3213"
        },
        "product_reference": "CSAFPID-2201",
        "relates_to_product_reference": "CSAFPID-1113"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Welotec Firmware Router TK500v1 v2.3.0.r5542 installed on Welotec Hardware Router TK500v1 TK515L Set",
          "product_id": "CSAFPID-3214"
        },
        "product_reference": "CSAFPID-2201",
        "relates_to_product_reference": "CSAFPID-1114"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-1083",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An unauthenticated remote attacker who is aware of a MQTT  topic name can send and receive messages, including GET/SET configuration commands, reboot commands and firmware updates.\n",
          "title": "Summary"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-3201",
          "CSAFPID-3202",
          "CSAFPID-3203",
          "CSAFPID-3204",
          "CSAFPID-3205",
          "CSAFPID-3206",
          "CSAFPID-3207",
          "CSAFPID-3208",
          "CSAFPID-3209",
          "CSAFPID-3210",
          "CSAFPID-3211",
          "CSAFPID-3212",
          "CSAFPID-3213",
          "CSAFPID-3214"
        ],
        "known_affected": [
          "CSAFPID-3101",
          "CSAFPID-3102",
          "CSAFPID-3103",
          "CSAFPID-3104",
          "CSAFPID-3105",
          "CSAFPID-3106",
          "CSAFPID-3107",
          "CSAFPID-3108",
          "CSAFPID-3109",
          "CSAFPID-3110",
          "CSAFPID-3111",
          "CSAFPID-3112",
          "CSAFPID-3113",
          "CSAFPID-3114"
        ]
      },
      "release_date": "2024-04-09T08:25:46.915Z",
      "remediations": [
        {
          "category": "mitigation",
          "date": "2023-06-07T10:00:00.000Z",
          "details": "Update the product to firmware v2.3.0.r5542 or later.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 9.8,
            "environmentalSeverity": "CRITICAL",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 9.8,
            "temporalSeverity": "CRITICAL",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-3101",
            "CSAFPID-3102",
            "CSAFPID-3103",
            "CSAFPID-3104",
            "CSAFPID-3105",
            "CSAFPID-3106",
            "CSAFPID-3107",
            "CSAFPID-3108",
            "CSAFPID-3109",
            "CSAFPID-3110",
            "CSAFPID-3111",
            "CSAFPID-3112",
            "CSAFPID-3113",
            "CSAFPID-3114"
          ]
        },
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 0,
            "baseSeverity": "NONE",
            "confidentialityImpact": "NONE",
            "environmentalScore": 0,
            "environmentalSeverity": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 0,
            "temporalSeverity": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-3201",
            "CSAFPID-3202",
            "CSAFPID-3203",
            "CSAFPID-3204",
            "CSAFPID-3205",
            "CSAFPID-3206",
            "CSAFPID-3207",
            "CSAFPID-3208",
            "CSAFPID-3209",
            "CSAFPID-3210",
            "CSAFPID-3211",
            "CSAFPID-3212",
            "CSAFPID-3213",
            "CSAFPID-3214"
          ]
        }
      ],
      "title": "CVE-2023-1083"
    },
    {
      "cve": "CVE-2023-1082",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An remote attacker with low privileges can perform a command injection which can lead to root access.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-3201",
          "CSAFPID-3202",
          "CSAFPID-3203",
          "CSAFPID-3204",
          "CSAFPID-3205",
          "CSAFPID-3206",
          "CSAFPID-3207",
          "CSAFPID-3208",
          "CSAFPID-3209",
          "CSAFPID-3210",
          "CSAFPID-3211",
          "CSAFPID-3212",
          "CSAFPID-3213",
          "CSAFPID-3214"
        ],
        "known_affected": [
          "CSAFPID-3101",
          "CSAFPID-3102",
          "CSAFPID-3103",
          "CSAFPID-3104",
          "CSAFPID-3105",
          "CSAFPID-3106",
          "CSAFPID-3107",
          "CSAFPID-3108",
          "CSAFPID-3109",
          "CSAFPID-3110",
          "CSAFPID-3111",
          "CSAFPID-3112",
          "CSAFPID-3113",
          "CSAFPID-3114"
        ]
      },
      "release_date": "2024-04-09T08:25:34.716Z",
      "remediations": [
        {
          "category": "mitigation",
          "date": "2023-06-07T10:00:00.000Z",
          "details": "Update the product to firmware v2.3.0.r5542 or later.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 8.8,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 8.8,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-3101",
            "CSAFPID-3102",
            "CSAFPID-3103",
            "CSAFPID-3104",
            "CSAFPID-3105",
            "CSAFPID-3106",
            "CSAFPID-3107",
            "CSAFPID-3108",
            "CSAFPID-3109",
            "CSAFPID-3110",
            "CSAFPID-3111",
            "CSAFPID-3112",
            "CSAFPID-3113",
            "CSAFPID-3114"
          ]
        },
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 0,
            "baseSeverity": "NONE",
            "confidentialityImpact": "NONE",
            "environmentalScore": 0,
            "environmentalSeverity": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 0,
            "temporalSeverity": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-3201",
            "CSAFPID-3202",
            "CSAFPID-3203",
            "CSAFPID-3204",
            "CSAFPID-3205",
            "CSAFPID-3206",
            "CSAFPID-3207",
            "CSAFPID-3208",
            "CSAFPID-3209",
            "CSAFPID-3210",
            "CSAFPID-3211",
            "CSAFPID-3212",
            "CSAFPID-3213",
            "CSAFPID-3214"
          ]
        }
      ],
      "title": "CVE-2023-1082"
    }
  ]
}
```

## [vde-2024-043](https://vulnerability.circl.lu/vuln/vde-2024-043)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "summary": "reporting",
        "organization": "Qualys Threat Research Unit (TRU)"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "Products from the Edge Gateway Family are affected by recently published so called RegreSSHion vulnerability.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "The vulnerability can lead to unauthenticated remote code execution.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "Disable SSH Access via CLI Command or Config Import locally or for a centrally managed device by changing the configuration in SMART EMSRefer to eG OS manual chapter 4.26 for further information",
        "title": "Mitigation"
      },
      {
        "category": "description",
        "text": "Update egOS on affected products to version v1.5.4",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "contact_details": "psirt@welotec.com",
      "name": "Welotec GmbH",
      "namespace": "https://welotec.com",
      "category": "vendor"
    },
    "references": [
      {
        "category": "self",
        "summary": "VDE-2024-043: Welotec: Multiple products are vulnerable to regreSSHion - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2024-043/"
      },
      {
        "category": "self",
        "summary": "VDE-2024-043: Welotec: Multiple products are vulnerable to regreSSHion - CSAF",
        "url": "https://welotec.csaf-tp.certvde.com/.well-known/csaf/white/2024/vde-2024-043.json"
      },
      {
        "category": "external",
        "summary": "Vendor PSIRT",
        "url": "https://welotec.com"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for Welotec GmbH",
        "url": "https://certvde.com/en/advisories/vendor/welotec/"
      }
    ],
    "title": "Welotec: Multiple products are vulnerable to regreSSHion",
    "tracking": {
      "aliases": [
        "VDE-2024-043"
      ],
      "current_release_date": "2024-08-22T06:00:00.000Z",
      "generator": {
        "date": "2025-04-14T08:39:21.553Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.23"
        }
      },
      "id": "VDE-2024-043",
      "initial_release_date": "2024-08-22T06:00:00.000Z",
      "revision_history": [
        {
          "date": "2024-08-22T06:00:00.000Z",
          "number": "1",
          "summary": "Initial revision."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "name": "Welotec",
        "category": "vendor",
        "branches": [
          {
            "name": "Hardware",
            "category": "product_family",
            "branches": [
              {
                "name": "EG500Mk2-A11001-000101",
                "category": "product_name",
                "product": {
                  "name": "EG500Mk2-A11001-000101",
                  "product_id": "CSAFPID-11001",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100170"
                    ]
                  }
                }
              },
              {
                "name": "EG500Mk2-A11001-000201",
                "category": "product_name",
                "product": {
                  "name": "EG500Mk2-A11001-000201",
                  "product_id": "CSAFPID-11002",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100290"
                    ]
                  }
                }
              },
              {
                "name": "EG500Mk2-A11101-000101",
                "category": "product_name",
                "product": {
                  "name": "EG500Mk2-A11101-000101",
                  "product_id": "CSAFPID-11003",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100160"
                    ]
                  }
                }
              },
              {
                "name": "EG500Mk2-A12011-000101",
                "category": "product_name",
                "product": {
                  "name": "EG500Mk2-A12011-000101",
                  "product_id": "CSAFPID-11004",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100280"
                    ]
                  }
                }
              },
              {
                "name": "EG500Mk2-B11001-000101",
                "category": "product_name",
                "product": {
                  "name": "EG500Mk2-B11001-000101",
                  "product_id": "CSAFPID-11005",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100190"
                    ]
                  }
                }
              },
              {
                "name": "EG500Mk2-B11101-000101",
                "category": "product_name",
                "product": {
                  "name": "EG500Mk2-B11101-000101",
                  "product_id": "CSAFPID-11006",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100180"
                    ]
                  }
                }
              },
              {
                "name": "EG500Mk2-C11001-000101",
                "category": "product_name",
                "product": {
                  "name": "EG500Mk2-C11001-000101",
                  "product_id": "CSAFPID-11007",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100270"
                    ]
                  }
                }
              },
              {
                "name": "EG500Mk2-C11101-000101",
                "category": "product_name",
                "product": {
                  "name": "EG500Mk2-C11101-000101",
                  "product_id": "CSAFPID-11008",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100260"
                    ]
                  }
                }
              },
              {
                "name": "EG503L",
                "category": "product_name",
                "product": {
                  "name": "EG503L",
                  "product_id": "CSAFPID-11009",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100020"
                    ]
                  }
                }
              },
              {
                "name": "EG503L_4GB",
                "category": "product_name",
                "product": {
                  "name": "EG503L_4GB",
                  "product_id": "CSAFPID-11010",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100040"
                    ]
                  }
                }
              },
              {
                "name": "EG503L-G",
                "category": "product_name",
                "product": {
                  "name": "EG503L-G",
                  "product_id": "CSAFPID-11011",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100130"
                    ]
                  }
                }
              },
              {
                "name": "EG503W",
                "category": "product_name",
                "product": {
                  "name": "EG503W",
                  "product_id": "CSAFPID-11012",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100010"
                    ]
                  }
                }
              },
              {
                "name": "EG503W_4GB",
                "category": "product_name",
                "product": {
                  "name": "EG503W_4GB",
                  "product_id": "CSAFPID-11013",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG500100030"
                    ]
                  }
                }
              },
              {
                "name": "EG602L",
                "category": "product_name",
                "product": {
                  "name": "EG602L",
                  "product_id": "CSAFPID-11014",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG600100020"
                    ]
                  }
                }
              },
              {
                "name": "EG602W",
                "category": "product_name",
                "product": {
                  "name": "EG602W",
                  "product_id": "CSAFPID-11015",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG600100010"
                    ]
                  }
                }
              },
              {
                "name": "EG603L Mk2",
                "category": "product_name",
                "product": {
                  "name": "EG603L Mk2",
                  "product_id": "CSAFPID-11016",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG600100050"
                    ]
                  }
                }
              },
              {
                "name": "EG603W Mk2",
                "category": "product_name",
                "product": {
                  "name": "EG603W Mk2",
                  "product_id": "CSAFPID-11017",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG600100040"
                    ]
                  }
                }
              },
              {
                "name": "EG802W",
                "category": "product_name",
                "product": {
                  "name": "EG802W",
                  "product_id": "CSAFPID-11018",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG800100010"
                    ]
                  }
                }
              },
              {
                "name": "EG802W_i7_512GB_DinRail",
                "category": "product_name",
                "product": {
                  "name": "EG802W_i7_512GB_DinRail",
                  "product_id": "CSAFPID-11019",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG800100040"
                    ]
                  }
                }
              },
              {
                "name": "EG802W_i7_512GB_w/o DinRail",
                "category": "product_name",
                "product": {
                  "name": "EG802W_i7_512GB_w/o DinRail",
                  "product_id": "CSAFPID-11020",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG800100050"
                    ]
                  }
                }
              },
              {
                "name": "EG804W",
                "category": "product_name",
                "product": {
                  "name": "EG804W",
                  "product_id": "CSAFPID-11021",
                  "product_identification_helper": {
                    "model_numbers": [
                      "WEG800100020"
                    ]
                  }
                }
              }
            ]
          },
          {
            "name": "Firmware",
            "category": "product_family",
            "branches": [
              {
                "name": "<=v1.5.3",
                "category": "product_version_range",
                "product": {
                  "name": "Firmware <=v1.5.3",
                  "product_id": "CSAFPID-21001"
                }
              },
              {
                "name": "v1.5.4",
                "category": "product_version",
                "product": {
                  "name": "Firmware v1.5.4",
                  "product_id": "CSAFPID-22001"
                }
              }
            ]
          }
        ]
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31005",
          "CSAFPID-31006",
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010",
          "CSAFPID-31011",
          "CSAFPID-31012",
          "CSAFPID-31013",
          "CSAFPID-31014",
          "CSAFPID-31015",
          "CSAFPID-31016",
          "CSAFPID-31017",
          "CSAFPID-31018",
          "CSAFPID-31019",
          "CSAFPID-31020",
          "CSAFPID-31021"
        ],
        "summary": "Affected products."
      },
      {
        "group_id": "CSAFGID-0002",
        "product_ids": [
          "CSAFPID-32001",
          "CSAFPID-32002",
          "CSAFPID-32003",
          "CSAFPID-32004",
          "CSAFPID-32005",
          "CSAFPID-32006",
          "CSAFPID-32007",
          "CSAFPID-32008",
          "CSAFPID-32009",
          "CSAFPID-32010",
          "CSAFPID-32011",
          "CSAFPID-32012",
          "CSAFPID-32013",
          "CSAFPID-32014",
          "CSAFPID-32015",
          "CSAFPID-32016",
          "CSAFPID-32017",
          "CSAFPID-32018",
          "CSAFPID-32019",
          "CSAFPID-32020",
          "CSAFPID-32021"
        ],
        "summary": "Fixed products."
      }
    ],
    "relationships": [
      {
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11001",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=v1.5.3 installed on EG500Mk2-A11001-000101",
          "product_id": "CSAFPID-31001"
        }
      },
      {
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11002",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=v1.5.3 installed on EG500Mk2-A11001-000201",
          "product_id": "CSAFPID-31002"
        }
      },
      {
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11003",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=v1.5.3 installed on EG500Mk2-A11101-000101",
          "product_id": "CSAFPID-31003"
        }
      },
      {
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11004",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=v1.5.3 installed on EG500Mk2-A12011-000101",
          "product_id": "CSAFPID-31004"
        }
      },
      {
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11005",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=v1.5.3 installed on EG500Mk2-B11001-000101",
          "product_id": "CSAFPID-31005"
        }
      },
      {
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11006",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=v1.5.3 installed on EG500Mk2-B11101-000101",
          "product_id": "CSAFPID-31006"
        }
      },
      {
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11007",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=v1.5.3 installed on EG500Mk2-C11001-000101",
          "product_id": "CSAFPID-31007"
        }
      },
      {
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11008",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=v1.5.3 installed on EG500Mk2-C11101-000101",
          "product_id": "CSAFPID-31008"
        }
      },
      {
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11009",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=v1.5.3 installed on EG503L",
          "product_id": "CSAFPID-31009"
        }
      },
      {
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11010",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=v1.5.3 installed on EG503L_4GB",
          "product_id": "CSAFPID-31010"
        }
      },
      {
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11011",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=v1.5.3 installed on EG503L-G",
          "product_id": "CSAFPID-31011"
        }
      },
      {
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11012",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=v1.5.3 installed on EG503W",
          "product_id": "CSAFPID-31012"
        }
      },
      {
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11013",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=v1.5.3 installed on EG503W_4GB",
          "product_id": "CSAFPID-31013"
        }
      },
      {
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11014",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=v1.5.3 installed on EG602L",
          "product_id": "CSAFPID-31014"
        }
      },
      {
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11015",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=v1.5.3 installed on EG602W",
          "product_id": "CSAFPID-31015"
        }
      },
      {
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11016",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=v1.5.3 installed on EG603L Mk2",
          "product_id": "CSAFPID-31016"
        }
      },
      {
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11017",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=v1.5.3 installed on EG603W Mk2",
          "product_id": "CSAFPID-31017"
        }
      },
      {
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11018",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=v1.5.3 installed on EG802W",
          "product_id": "CSAFPID-31018"
        }
      },
      {
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11019",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=v1.5.3 installed on EG802W_i7_512GB_DinRail",
          "product_id": "CSAFPID-31019"
        }
      },
      {
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11020",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=v1.5.3 installed on EG802W_i7_512GB_w/o DinRail",
          "product_id": "CSAFPID-31020"
        }
      },
      {
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11021",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=v1.5.3 installed on EG804W",
          "product_id": "CSAFPID-31021"
        }
      },
      {
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11001",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware v1.5.4 installed on EG500Mk2-A11001-000101",
          "product_id": "CSAFPID-32001"
        }
      },
      {
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11002",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware v1.5.4 installed on EG500Mk2-A11001-000201",
          "product_id": "CSAFPID-32002"
        }
      },
      {
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11003",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware v1.5.4 installed on EG500Mk2-A11101-000101",
          "product_id": "CSAFPID-32003"
        }
      },
      {
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11004",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware v1.5.4 installed on EG500Mk2-A12011-000101",
          "product_id": "CSAFPID-32004"
        }
      },
      {
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11005",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware v1.5.4 installed on EG500Mk2-B11001-000101",
          "product_id": "CSAFPID-32005"
        }
      },
      {
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11006",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware v1.5.4 installed on EG500Mk2-B11101-000101",
          "product_id": "CSAFPID-32006"
        }
      },
      {
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11007",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware v1.5.4 installed on EG500Mk2-C11001-000101",
          "product_id": "CSAFPID-32007"
        }
      },
      {
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11008",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware v1.5.4 installed on EG500Mk2-C11101-000101",
          "product_id": "CSAFPID-32008"
        }
      },
      {
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11009",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware v1.5.4 installed on EG503L",
          "product_id": "CSAFPID-32009"
        }
      },
      {
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11010",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware v1.5.4 installed on EG503L_4GB",
          "product_id": "CSAFPID-32010"
        }
      },
      {
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11011",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware v1.5.4 installed on EG503L-G",
          "product_id": "CSAFPID-32011"
        }
      },
      {
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11012",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware v1.5.4 installed on EG503W",
          "product_id": "CSAFPID-32012"
        }
      },
      {
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11013",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware v1.5.4 installed on EG503W_4GB",
          "product_id": "CSAFPID-32013"
        }
      },
      {
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11014",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware v1.5.4 installed on EG602L",
          "product_id": "CSAFPID-32014"
        }
      },
      {
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11015",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware v1.5.4 installed on EG602W",
          "product_id": "CSAFPID-32015"
        }
      },
      {
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11016",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware v1.5.4 installed on EG603L Mk2",
          "product_id": "CSAFPID-32016"
        }
      },
      {
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11017",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware v1.5.4 installed on EG603W Mk2",
          "product_id": "CSAFPID-32017"
        }
      },
      {
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11018",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware v1.5.4 installed on EG802W",
          "product_id": "CSAFPID-32018"
        }
      },
      {
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11019",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware v1.5.4 installed on EG802W_i7_512GB_DinRail",
          "product_id": "CSAFPID-32019"
        }
      },
      {
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11020",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware v1.5.4 installed on EG802W_i7_512GB_w/o DinRail",
          "product_id": "CSAFPID-32020"
        }
      },
      {
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11021",
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware v1.5.4 installed on EG804W",
          "product_id": "CSAFPID-32021"
        }
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-6387",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"
      },
      "notes": [
        {
          "category": "description",
          "text": "A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002",
          "CSAFPID-32003",
          "CSAFPID-32004",
          "CSAFPID-32005",
          "CSAFPID-32006",
          "CSAFPID-32007",
          "CSAFPID-32008",
          "CSAFPID-32009",
          "CSAFPID-32010",
          "CSAFPID-32011",
          "CSAFPID-32012",
          "CSAFPID-32013",
          "CSAFPID-32014",
          "CSAFPID-32015",
          "CSAFPID-32016",
          "CSAFPID-32017",
          "CSAFPID-32018",
          "CSAFPID-32019",
          "CSAFPID-32020",
          "CSAFPID-32021"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31005",
          "CSAFPID-31006",
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010",
          "CSAFPID-31011",
          "CSAFPID-31012",
          "CSAFPID-31013",
          "CSAFPID-31014",
          "CSAFPID-31015",
          "CSAFPID-31016",
          "CSAFPID-31017",
          "CSAFPID-31018",
          "CSAFPID-31019",
          "CSAFPID-31020",
          "CSAFPID-31021"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Disable SSH Access via CLI Command or Config Import locally or for a centrally managed device by changing the configuration in SMART EMSRefer to eG OS manual chapter 4.26 for further information",
          "group_ids": [
            "CSAFGID-0001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update egOS on affected products to version v1.5.4",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 8.1,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 8.1,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004",
            "CSAFPID-31005",
            "CSAFPID-31006",
            "CSAFPID-31007",
            "CSAFPID-31008",
            "CSAFPID-31009",
            "CSAFPID-31010",
            "CSAFPID-31011",
            "CSAFPID-31012",
            "CSAFPID-31013",
            "CSAFPID-31014",
            "CSAFPID-31015",
            "CSAFPID-31016",
            "CSAFPID-31017",
            "CSAFPID-31018",
            "CSAFPID-31019",
            "CSAFPID-31020",
            "CSAFPID-31021"
          ]
        }
      ],
      "title": "CVE-2024-6387"
    }
  ]
}
```

## [vde-2024-023](https://vulnerability.circl.lu/vuln/vde-2024-023)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "Welotec has been informed by an external source that the WebUI of the device management solution \"SMART EMS\" and the remote connectivity solution \"VPN Security Suite\" is vulnerable to so-called \"Clickjacking\" and advises to update to version v3.1.4 or later.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "Please see the CVE description.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "This vulnerability can be mitigated with the use of an additional Reverse Proxy and / or Web Application Firewall protecting the WebUI.",
        "title": "Mitigation"
      },
      {
        "category": "description",
        "text": "Update the software to version 3.1.4 or later and configure the Content Security Policy (CSP).",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "contact_details": "psirt@welotec.com",
      "name": "Welotec GmbH",
      "namespace": "https://welotec.com",
      "category": "vendor"
    },
    "references": [
      {
        "category": "self",
        "summary": "VDE-2024-023: Welotec: Clickjacking Vulnerability in WebUI - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2024-023/"
      },
      {
        "category": "self",
        "summary": "VDE-2024-023: Welotec: Clickjacking Vulnerability in WebUI - CSAF",
        "url": "https://welotec.csaf-tp.certvde.com/.well-known/csaf/white/2024/vde-2024-023.json"
      },
      {
        "category": "external",
        "summary": "Vendor PSIRT",
        "url": "https://welotec.com"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for Welotec GmbH",
        "url": "https://certvde.com/en/advisories/vendor/welotec/"
      }
    ],
    "title": "Welotec: Clickjacking Vulnerability in WebUI",
    "tracking": {
      "aliases": [
        "VDE-2024-023"
      ],
      "current_release_date": "2024-04-23T08:00:00.000Z",
      "generator": {
        "date": "2025-04-14T09:32:10.211Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.23"
        }
      },
      "id": "VDE-2024-023",
      "initial_release_date": "2024-04-23T08:00:00.000Z",
      "revision_history": [
        {
          "date": "2024-04-23T08:00:00.000Z",
          "number": "1",
          "summary": "Initial revision."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "name": "Welotec",
        "category": "vendor",
        "branches": [
          {
            "name": "Software",
            "category": "product_family",
            "branches": [
              {
                "name": "SMART EMS",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<3.1.4",
                    "category": "product_version_range",
                    "product": {
                      "name": "SMART EMS <3.1.4",
                      "product_id": "CSAFPID-51001"
                    }
                  },
                  {
                    "name": "3.1.4",
                    "category": "product_version",
                    "product": {
                      "name": "SMART EMS 3.1.4",
                      "product_id": "CSAFPID-52001"
                    }
                  }
                ]
              },
              {
                "name": "VPN Security Suite",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<3.1.4",
                    "category": "product_version_range",
                    "product": {
                      "name": "VPN Security Suite <3.1.4",
                      "product_id": "CSAFPID-51002"
                    }
                  },
                  {
                    "name": "3.1.4",
                    "category": "product_version",
                    "product": {
                      "name": "VPN Security Suite 3.1.4",
                      "product_id": "CSAFPID-52002"
                    }
                  }
                ]
              }
            ]
          }
        ]
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ],
        "summary": "Affected products."
      },
      {
        "group_id": "CSAFGID-0002",
        "product_ids": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "summary": "Fixed products."
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-3911",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "notes": [
        {
          "category": "description",
          "text": "An unauthenticated remote attacker can deceive users into performing unintended actions due to improper restriction of rendered UI layers or frames. \n",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "This vulnerability can be mitigated with the use of an additional Reverse Proxy and / or Web Application Firewall protecting the WebUI.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update the software to version 3.1.4 or later and configure the Content Security Policy (CSP).",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "title": "CVE-2024-3911"
    }
  ]
}
```