Weidmueller Ie Sw Vl08Mt 5Tx 1Sc 2Scs vulnerabilities
10 vulnerabilities
Known vulnerabilities in Weidmueller Ie Sw Vl08Mt 5Tx 1Sc 2Scs, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-41650weidmueller · ie-sw-pl10m-3gt-7tx_firmware +12 moreWeidmueller: Denial-of-Service Vulnerability in Industrial Ethernet SwitchesAn unauthenticated remote attacker can exploit input validation in cmd services of the devices, allowing them to disrupt system operations and potentially cause a denial-of-service.EPSS0.50%HighCVE-2025-41649weidmueller · ie-sw-pl10m-3gt-7tx_firmware +12 moreWeidmueller: Out-of-Bounds Write Vulnerability in Industrial Ethernet SwitchesAn unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer, potentially leading to a denial-of-service condition for the devices.EPSS0.50%HighCVE-2025-41653weidmueller · ie-sw-pl10m-3gt-7tx_firmware +12 moreWeidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet SwitchesAn unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicious header, potentially causing the server to crash or become unresponsive.EPSS0.59%CriticalCVE-2025-41651weidmueller · ie-sw-pl10m-3gt-7tx_firmware +12 moreWeidmueller: Missing Authentication Vulnerability in Industrial Ethernet SwitchesDue to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise.EPSS0.60%CriticalCVE-2025-41652weidmueller · ie-sw-pl10m-3gt-7tx_firmware +12 moreWeidmueller: Authentication Bypass Vulnerability in Industrial Ethernet SwitchesThe devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism. An unauthenticated remote attacker could exploit this weakness by performing brute-force attacks to guess valid credentials or by using MD5 collision techniques to forge authentication hashes, potentially compromising the device.EPSS0.47%CriticalCVE-2019-16672weidmueller · ie-sw-pl08m-6tx-2sc_firmware +39 moreweidmueller ie-sw-pl08m-6tx-2sc_firmwareAn issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Sensitive Credentials data is transmitted in cleartext.EPSS1.28%MediumCVE-2019-16671weidmueller · ie-sw-pl08m-6tx-2sc_firmware +39 moreweidmueller ie-sw-pl08m-6tx-2sc_firmwareAn issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Remote authenticated users can crash a device with a special packet because of Uncontrolled Resource Consumption.EPSS1.93%CriticalCVE-2019-16674weidmueller · ie-sw-pl08m-6tx-2sc_firmware +39 moreweidmueller ie-sw-pl08m-6tx-2sc_firmwareAn issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Authentication Information used in a cookie is predictable and can lead to admin password compromise when captured on the network.EPSS1.87%CriticalCVE-2019-16670weidmueller · ie-sw-pl08m-6tx-2sc_firmware +39 moreweidmueller ie-sw-pl08m-6tx-2sc_firmwareAn issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. The Authentication mechanism has no brute-force prevention.EPSS1.98%HighCVE-2019-16673weidmueller · ie-sw-pl08m-6tx-2sc_firmware +39 moreweidmueller ie-sw-pl08m-6tx-2sc_firmwareAn issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Passwords are stored in cleartext and can be read by anyone with access to the device.EPSS1.11%