Weidmueller vulnerabilities, page 2
35 vulnerabilities
Known vulnerabilities in Weidmueller products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 64 products.
CVE-2025-41710janitzaumg 96rm-e 230v(5222062)+3
EPSS score0.39%
An unauthenticated remote attacker may use hardcodes credentials to get access to the previously activated FTP Server with limited read and write privileges.CVE-2025-41684weidmuellerie-sr-2tx-wl+2EPSS score0.81%
An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of improper sanitizing of user input in the Main Web Interface (endpoint tls_iotgen_setting).CVE-2025-41687weidmuellerie-sr-2tx-wl+2EPSS score0.77%
An unauthenticated remote attacker may use a stack based buffer overflow in the u-link Management API to gain full access on the affected devices.CVE-2025-41649weidmuellerie-sw-pl10m-3gt-7tx_firmware+12EPSS score0.50%
An unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer, potentially leading to a denial-of-service condition for the devices.CVE-2025-41653weidmuellerie-sw-pl10m-3gt-7tx_firmware+12EPSS score0.59%
An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicious header, potentially causing the server to crash or become unresponsive.CVE-2025-41651weidmuellerie-sw-pl10m-3gt-7tx_firmware+12EPSS score0.60%
Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise.CVE-2025-41711janitzaumg 96rm-e 230v(5222062)+3EPSS score0.32%
An unauthenticated remote attacker can use firmware images to extract password hashes and brute force plaintext passwords of accounts with limited access.CVE-2025-41652weidmuellerie-sw-pl10m-3gt-7tx_firmware+12EPSS score0.47%
The devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism. An unauthenticated remote attacker could exploit this weakness by performing brute-force attacks to guess valid credentials or by using MD5 collision techniques to forge authentication hashes, potentially compromising the device.CVE-2020-12525emersonrosemount_transmitter_interface_software+11EPSS score1.36%
M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.CVE-2022-3073quanosschema st4 example web templates+9EPSS score0.48%
Quanos "SCHEMA ST4" example web templates in version Bootstrap 2019 v2/2021 v1/2022 v1/2022 SP1 v1 or below are prone to JavaScript injection allowing a remote attacker to hijack existing sessions to e.g. other web services in the same environment or execute scripts in the users browser environment. The affected script is '*-schema.js'.CVE-2019-16672weidmuellerie-sw-pl08m-6tx-2sc_firmware+39EPSS score1.28%
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Sensitive Credentials data is transmitted in cleartext.CVE-2019-16671weidmuellerie-sw-pl08m-6tx-2sc_firmware+39EPSS score1.93%
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Remote authenticated users can crash a device with a special packet because of Uncontrolled Resource Consumption.CVE-2019-16674weidmuellerie-sw-pl08m-6tx-2sc_firmware+39EPSS score1.87%
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Authentication Information used in a cookie is predictable and can lead to admin password compromise when captured on the network.CVE-2019-16670weidmuellerie-sw-pl08m-6tx-2sc_firmware+39EPSS score1.98%
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. The Authentication mechanism has no brute-force prevention.CVE-2019-16673weidmuellerie-sw-pl08m-6tx-2sc_firmware+39EPSS score1.11%
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Passwords are stored in cleartext and can be read by anyone with access to the device.