VDE-2025-023 — Weidmueller: OpenSSL vulnerability in industrial ethernet switches

Summary

Multiple Weidmueller products are affected by an OpenSSL vulnerability.

Weidmüller has released new firmwares of the affected products to fix the vulnerability.

Details

Impact
Weidmüller products are vulnerable to a birthday attack referred to as SWEET32. When exploited, the vulnerability may lead to the unauthorized disclosure of information.

Remediation
Update to new version as listed below.

Vulnerabilities 1

High 7.5

CVE-2016-2183 Public exploit EPSS 95%

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a b…

openjdk-8 openssl openjdk-7 openssl Ubuntu Alpine

Sep 1, 2016

Revision history

2025-03-05 #2
added categories to references
2025-03-05 #1
Initial version

References

Weidmüller Security Advisory Board
https://support.weidmueller.com/support-center/popular-resources/security-advisory-board
CERT@VDE Security Advisories for Weidmüller
https://certvde.com/de/advisories/vendor/weidmueller/
VDE-2025-023: Weidmueller: OpenSSL vulnerability in industrial ethernet switches - HTML
https://certvde.com/de/advisories/VDE-2025-023