Summary
Multiple vulnerabilities in the web-based management functions of the affected Welotec routers, including VPN-related functions, may allow a remote attacker with high privileges to inject commands or trigger a buffer overflow. Successful exploitation may result in command execution with root privileges or a denial of service.
Vulnerabilities 6
-
High 7.2
Command Injection in Management Control Functions
Improper input validation in management control functions may allow a remote attacker with high privileges to inject operating system commands and execute them with root privileges.
-
High 7.2
Command Injection in ZeroTier VPN
Improper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.
-
High 7.2
Command Injection in WireGuard VPN
Improper input validation in the WireGuard VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.
-
High 7.2
Command Injection in Digital I/O
Improper input validation in the Digital I/O function may allow a remote attacker with high privileges to inject operating system commands and execute them with root privileges.
-
High 7.2
Command Injection in IPsec VPN
Improper input validation in the IPsec VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.
-
Medium 4.9
Buffer Overflow in Digital I/O
Insufficient bounds checking in the Digital I/O function may allow a remote attacker with high privileges to cause a denial of service.
Revision history
-
#1.0.0
Initial release.
References
-
Welotec PSIRT
https://welotec.com/de/pages/coordinated-vulnerability-disclosure-policy
-
CERT@VDE Security Advisories for Welotec
https://certvde.com/de/advisories/vendor/welotec
-
VDE-2026-119: Welotec: Multiple vulnerabilities in TK routers - HTML
https://certvde.com/en/advisories/VDE-2026-119