Skip to content
OpenAdvisories

Vendor

Weidmueller Interface

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.8

    Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface

    The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system…

  • Critical 9.8

    SQL injection via unauthenticated GetGridData endpoint

    In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows a remote unauthenticated attacker to execute arbitrary SQL commands.