Weidmueller IE SR 2TX WL 4G US V vulnerabilities
5 vulnerabilities
Known vulnerabilities in Weidmueller IE SR 2TX WL 4G US V, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-41663weidmuellerie-sr-2tx-wl+2
EPSS score0.65%
For u-link Management API an unauthenticated remote attacker in a man-in-the-middle position can inject arbitrary commands in responses returned by WWH servers, which are then executed with elevated privileges. To get into such a position, clients would need to use insecure proxy configurations.CVE-2025-41661weidmuellerie-sr-2tx-wl+2EPSS score0.28%
An unauthenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of Cross-Site Request Forgery (CSRF) protection.CVE-2025-41683weidmuellerie-sr-2tx-wl+2EPSS score0.81%
An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of improper sanitizing of user input in the Main Web Interface (endpoint event_mail_test).CVE-2025-41684weidmuellerie-sr-2tx-wl+2EPSS score0.81%
An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of improper sanitizing of user input in the Main Web Interface (endpoint tls_iotgen_setting).CVE-2025-41687weidmuellerie-sr-2tx-wl+2EPSS score0.77%
An unauthenticated remote attacker may use a stack based buffer overflow in the u-link Management API to gain full access on the affected devices.