CVE-2015-7923

Westermo WeOS before 4.19.0 uses the same SSL private key across different customers' installations, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a key.

• CWE-310

• https://ics-cert.us-cert.gov/advisories/ICSA-16-028-01Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-16-028-01Third Party Advisory, US Government Resource

Published

Jan 30, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7917Untrusted search path vulnerability in Open Automation OPC S…
• CVE-2015-7918Multiple buffer overflows in the F1BookView ActiveX control …
• CVE-2015-7919SearchBlox 8.3 before 8.3.1 allows remote attackers to write…
• CVE-2015-7920Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-7921The FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, …9.1
• CVE-2015-7922Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-7924eWON devices with firmware before 10.1s0 do not trigger the …
• CVE-2015-7925Cross-site request forgery (CSRF) vulnerability on eWON devi…
• CVE-2015-7926eWON devices with firmware before 10.1s0 omit RBAC for I/O s…
• CVE-2015-7927Cross-site scripting (XSS) vulnerability on eWON devices wit…
• CVE-2015-7928eWON devices with firmware before 10.1s0 do not have an off …
• CVE-2015-7929eWON devices with firmware through 10.1s0 support unspecifie…