Summary
Weidmüller product PROCON-WIN is affected by hard-coded credentials.
Weidmüller has released a new version of the affected product to fix the vulnerability.
Details
Impact
An unauthenticated remote attacker can exploit the product to gain unauthorized administration privileges due to hard-coded credentials.
Remediation
Update to version 5.7.14.1
Vulnerabilities 1
-
Critical 9.8
Weidmueller: Authentication Vulnerability due to Hard-coded Credentials
An unauthenticated remote attacker can use hard-coded credentials to gain full administration privileges on the affected product.
Revision history
-
#2
Fix: reference category
-
#1
Initial version
References
-
Weidmüller Security Advisory Board
https://support.weidmueller.com/support-center/popular-resources/security-advisory-board
-
CERT@VDE Security Advisories for Weidmüller
https://certvde.com/de/advisories/vendor/weidmueller/
-
VDE-2025-021: Weidmueller: Authentication Vulnerability in PROCON-WIN 5 - HTML
https://certvde.com/de/advisories/VDE-2025-021