Weidmueller vulnerabilities
35 vulnerabilities
Known vulnerabilities in Weidmueller products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 64 products.
Products
50 of 64- Ie Wl Bl Ap Cl Eu12 vulnerabilities
- Ie Wl Bl Ap Cl Us12 vulnerabilities
- Ie Wl Vl Ap Br Cl Eu12 vulnerabilities
- Ie Wl Vl Ap Br Cl Us12 vulnerabilities
- Ie Wlt Bl Ap Cl Eu12 vulnerabilities
- Ie Wlt Bl Ap Cl Us12 vulnerabilities
- Ie Wlt Vl Ap Br Cl Eu12 vulnerabilities
- Ie Wlt Vl Ap Br Cl Us12 vulnerabilities
- Ie Sw Pl10M 3Gt 7Tx10 vulnerabilities
- Ie Sw Pl10Mt 3Gt 7Tx10 vulnerabilities
- Ie Sw Pl16M 16Tx10 vulnerabilities
- Ie Sw Pl16Mt 16Tx10 vulnerabilities
- Ie Sw Pl18M 2Gc 16Tx10 vulnerabilities
- Ie Sw Pl18Mt 2Gc 16Tx10 vulnerabilities
- Ie Sw Vl05M 5Tx10 vulnerabilities
- Ie Sw Vl05Mt 5Tx10 vulnerabilities
- Ie Sw Vl08Mt 5Tx 1Sc 2Scs10 vulnerabilities
- Ie Sw Vl08Mt 6Tx 2Sc10 vulnerabilities
- Ie Sw Vl08Mt 6Tx 2Scs10 vulnerabilities
- Ie Sw Vl08Mt 6Tx 2St10 vulnerabilities
- Ie Sw Vl08Mt 8Tx10 vulnerabilities
- IE SR 2TX WL5 vulnerabilities
- IE SR 2TX WL 4G EU5 vulnerabilities
- IE SR 2TX WL 4G US V5 vulnerabilities
- Ie Sw Pl08M 6Tx 2Sc5 vulnerabilities
- Ie Sw Pl08M 6Tx 2Scs5 vulnerabilities
- Ie Sw Pl08M 6Tx 2St5 vulnerabilities
- Ie Sw Pl08M 8Tx5 vulnerabilities
- Ie Sw Pl08Mt 6Tx 2Sc5 vulnerabilities
- Ie Sw Pl08Mt 6Tx 2Scs5 vulnerabilities
- Ie Sw Pl08Mt 6Tx 2St5 vulnerabilities
- Ie Sw Pl08Mt 8Tx5 vulnerabilities
- Ie Sw Pl09M 5Gc 4Gt5 vulnerabilities
- Ie Sw Pl09Mt 5Gc 4Gt5 vulnerabilities
- Ie Sw Pl10M 1Gt 2Gs 7Tx5 vulnerabilities
- Ie Sw Pl10Mt 1Gt 2Gs 7Tx5 vulnerabilities
- Ie Sw Pl16M 14Tx 2Sc5 vulnerabilities
- Ie Sw Pl16M 14Tx 2St5 vulnerabilities
- Ie Sw Pl16Mt 14Tx 2Sc5 vulnerabilities
- Ie Sw Pl16Mt 14Tx 2St5 vulnerabilities
- Ie Sw Pl18M 2Gc14Tx2Sc5 vulnerabilities
- Ie Sw Pl18M 2Gc14Tx2Scs5 vulnerabilities
- Ie Sw Pl18M 2Gc14Tx2St5 vulnerabilities
- Ie Sw Pl18Mt 2Gc14Tx2Sc5 vulnerabilities
- Ie Sw Pl18Mt 2Gc14Tx2Scs5 vulnerabilities
- Ie Sw Pl18Mt 2Gc14Tx2St5 vulnerabilities
- Ie Sw Vl05M 3Tx 2Sc5 vulnerabilities
- Ie Sw Vl05M 3Tx 2St5 vulnerabilities
- Ie Sw Vl05Mt 3Tx 2Sc5 vulnerabilities
- Ie Sw Vl05Mt 3Tx 2St5 vulnerabilities
CVE-2021-20999weidmuelleriot-gw30_firmware+7
EPSS score0.95%
In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting this vulnerability the device may be manipulated or the operation may be stopped.CVE-2021-33536weidmuellerie-wl-bl-ap-cl-eu_firmware+9EPSS score1.04%
In Weidmueller Industrial WLAN devices in multiple versions an exploitable denial-of-service vulnerability exists in ServiceAgent functionality. A specially crafted packet can cause an integer underflow, triggering a large memcpy that will access unmapped or out-of-bounds memory. An attacker can send this packet while unauthenticated to trigger this vulnerability.CVE-2021-33538weidmuellerie-wl-bl-ap-cl-eu_firmware+9EPSS score1.05%
In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs account settings functionality. A specially crafted user name entry can cause the overwrite of an existing user account password, resulting in remote shell access to the device as that user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.CVE-2021-33537weidmuellerie-wl-bl-ap-cl-eu_firmware+9EPSS score1.61%
In Weidmueller Industrial WLAN devices in multiple versions an exploitable remote code execution vulnerability exists in the iw_webs configuration parsing functionality. A specially crafted user name entry can cause an overflow of an error message buffer, resulting in remote code execution. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.CVE-2021-33535weidmuellerie-wl-bl-ap-cl-eu_firmware+9EPSS score1.61%
In Weidmueller Industrial WLAN devices in multiple versions an exploitable format string vulnerability exists in the iw_console conio_writestr functionality. A specially crafted time server entry can cause an overflow of the time server buffer, resulting in remote code execution. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.CVE-2021-33539weidmuellerie-wl-bl-ap-cl-eu_firmware+9EPSS score1.06%
In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. A specially configured device hostname can cause the device to interpret selected remote traffic as local traffic, resulting in a bypass of web authentication. An attacker can send authenticated SNMP requests to trigger this vulnerability.CVE-2021-33534weidmuellerie-wl-bl-ap-cl-eu_firmware+9EPSS score2.14%
In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the hostname functionality. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device. An attacker can send various requests while authenticated as a high privilege user to trigger this vulnerability.CVE-2021-33528weidmuellerie-wl-bl-ap-cl-eu_firmware+9EPSS score1.13%
In Weidmueller Industrial WLAN devices in multiple versions an exploitable privilege escalation vulnerability exists in the iw_console functionality. A specially crafted menu selection string can cause an escape from the restricted console, resulting in system access as the root user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.CVE-2021-33531weidmuellerie-wl-bl-ap-cl-eu_firmware+9EPSS score0.72%
In Weidmueller Industrial WLAN devices in multiple versions an exploitable use of hard-coded credentials vulnerability exists in multiple iw_* utilities. The device operating system contains an undocumented encryption password, allowing for the creation of custom diagnostic scripts. An attacker can send diagnostic scripts while authenticated as a low privilege user to trigger this vulnerability.CVE-2021-33532weidmuellerie-wl-bl-ap-cl-eu_firmware+9EPSS score1.73%
In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionality. A specially crafted diagnostic script file name can cause user input to be reflected in a subsequent iw_system call, resulting in remote control over the device. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.CVE-2021-33533weidmuellerie-wl-bl-ap-cl-eu_firmware+9EPSS score1.73%
In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionality. A specially crafted iw_serverip parameter can cause user input to be reflected in a subsequent iw_system call, resulting in remote control over the device. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.CVE-2021-33529weidmuellerie-wl-bl-ap-cl-eu_firmware+9EPSS score0.93%
In Weidmueller Industrial WLAN devices in multiple versions the usage of hard-coded cryptographic keys within the service agent binary allows for the decryption of captured traffic across the network from or to the device.CVE-2021-33530weidmuellerie-wl-bl-ap-cl-eu_firmware+9EPSS score1.73%
In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the devices. A specially crafted diagnostic script file can cause arbitrary busybox commands to be executed, resulting in remote control over the device. An attacker can send diagnostic while authenticated as a low privilege user to trigger this vulnerability.CVE-2025-1393weidmuellerprocon-winEPSS score0.56%
An unauthenticated remote attacker can use hard-coded credentials to gain full administration privileges on the affected product.CVE-2025-41650weidmuellerie-sw-pl10m-3gt-7tx_firmware+12EPSS score0.50%
An unauthenticated remote attacker can exploit input validation in cmd services of the devices, allowing them to disrupt system operations and potentially cause a denial-of-service.CVE-2025-41663weidmuellerie-sr-2tx-wl+2EPSS score0.65%
For u-link Management API an unauthenticated remote attacker in a man-in-the-middle position can inject arbitrary commands in responses returned by WWH servers, which are then executed with elevated privileges. To get into such a position, clients would need to use insecure proxy configurations.CVE-2025-41709janitzaumg 96rm-e 230v(5222062)+3EPSS score2.19%
An unauthenticated remote attacker can perform a command injection via Modbus-TCP or Modbus-RTU to gain read and write access on the affected device.CVE-2025-41661weidmuellerie-sr-2tx-wl+2EPSS score0.28%
An unauthenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of Cross-Site Request Forgery (CSRF) protection.CVE-2025-41712janitzaumg 96rm-e 230v(5222062)+3EPSS score0.40%
An unauthenticated remote attacker who tricks a user to upload a manipulated HTML file can get access to sensitive information on the device. This is a result of incorrect permission assignment for the web server.CVE-2025-41683weidmuellerie-sr-2tx-wl+2EPSS score0.81%
An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of improper sanitizing of user input in the Main Web Interface (endpoint event_mail_test).