Weidmüller

14 results · Feed

• High 7.2
  CVE-2021-33539

  WEIDMUELLER: WLAN devices affected by authentication bypass vulnerability

  In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. A specially configured device hostname can cause the device to interpret selected remote traffic as local traffic…

  Weidmüller IE-WL(T)-BL-AP-CL-XX IE-WL(T)-VL-AP-CL-XX
  Jun 25, 2021
• High 8.8
  CVE-2021-33538

  WEIDMUELLER: WLAN devices affected by improper access control vulnerability

  In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs account settings functionality. A specially crafted user name entry can cause the overwrite of an existing user account pass…

  Weidmüller IE-WL(T)-VL-AP-CL-XX IE-WL(T)-BL-AP-CL-XX
  Jun 25, 2021
• High 7.5
  CVE-2021-33536

  WEIDMUELLER: WLAN devices affected by Denial-of-Service vulnerability

  In Weidmueller Industrial WLAN devices in multiple versions an exploitable denial-of-service vulnerability exists in ServiceAgent functionality. A specially crafted packet can cause an integer underflow, triggering a large memcpy that will access unmapped or …

  Weidmüller IE-WL(T)-VL-AP-CL-XX IE-WL(T)-BL-AP-CL-XX
  Jun 25, 2021
• High 8.8
  CVE-2021-33537

  WEIDMUELLER: WLAN devices affected by Remote Code Execution (RCE) vulnerability

  In Weidmueller Industrial WLAN devices in multiple versions an exploitable remote code execution vulnerability exists in the iw_webs configuration parsing functionality. A specially crafted user name entry can cause an overflow of an error message buffer, res…

  Weidmüller IE-WL(T)-BL-AP-CL-XX IE-WL(T)-VL-AP-CL-XX
  Jun 25, 2021
• High 8.8
  CVE-2021-33535

  WEIDMUELLER: WLAN devices affected by exploitable format string vulnerability

  In Weidmueller Industrial WLAN devices in multiple versions an exploitable format string vulnerability exists in the iw_console conio_writestr functionality. A specially crafted time server entry can cause an overflow of the time server buffer, resulting in r…

  Weidmüller IE-WL(T)-VL-AP-CL-XX IE-WL(T)-BL-AP-CL-XX
  Jun 25, 2021
• High 7.2
  CVE-2021-33534

  WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability

  In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the hostname functionality. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, r…

  Weidmüller IE-WL(T)-VL-AP-CL-XX IE-WL(T)-BL-AP-CL-XX
  Jun 25, 2021
• High 8.8
  CVE-2021-33533

  WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability

  In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionality. A specially crafted iw_serverip parameter can cause user input to be reflected in a subsequent iw_system call, resu…

  Weidmüller IE-WL(T)-BL-AP-CL-XX IE-WL(T)-VL-AP-CL-XX
  Jun 25, 2021
• High 8.8
  CVE-2021-33532

  WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability

  In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionality. A specially crafted diagnostic script file name can cause user input to be reflected in a subsequent iw_system call…

  Weidmüller IE-WL(T)-VL-AP-CL-XX IE-WL(T)-BL-AP-CL-XX
  Jun 25, 2021
• High 8.8
  CVE-2021-33531

  WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability

  In Weidmueller Industrial WLAN devices in multiple versions an exploitable use of hard-coded credentials vulnerability exists in multiple iw_* utilities. The device operating system contains an undocumented encryption password, allowing for the creation of cu…

  Weidmüller IE-WL(T)-BL-AP-CL-XX IE-WL(T)-VL-AP-CL-XX
  Jun 25, 2021
• High 8.8
  CVE-2021-33530

  WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability

  In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the devices. A specially crafted diagnostic script file can cause arbitrary busybox commands to b…

  Weidmüller IE-WL(T)-VL-AP-CL-XX IE-WL(T)-BL-AP-CL-XX
  Jun 25, 2021
• High 7.5
  CVE-2021-33529

  WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability

  In Weidmueller Industrial WLAN devices in multiple versions the usage of hard-coded cryptographic keys within the service agent binary allows for the decryption of captured traffic across the network from or to the device.

  Weidmüller IE-WL(T)-BL-AP-CL-XX IE-WL(T)-VL-AP-CL-XX
  Jun 25, 2021
• High 8.8
  CVE-2021-33528

  WEIDMUELLER: WLAN devices affected by privilege escalation vulnerability

  In Weidmueller Industrial WLAN devices in multiple versions an exploitable privilege escalation vulnerability exists in the iw_console functionality. A specially crafted menu selection string can cause an escape from the restricted console, resulting in syste…

  Weidmüller IE-WL(T)-BL-AP-CL-XX IE-WL(T)-VL-AP-CL-XX
  Jun 25, 2021
• Critical 9.4
  CVE-2021-20999

  WEIDMUELLER: Accidentally open network port in u-controls and IoT-Gateways

  In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting this vulnerability the device may be manipulated or the operati…

  Weidmüller UC20-WL2000-IOT (No. 1334990000) IOT-GW30-4G-EU (No. 2682630000) UC20-WL2000-AC (No. 1334950000)
  May 13, 2021
• High 7.3
  CVE-2020-12525

  WAGO/M&M Software Deserialization of untrusted data in fdtCONTAINER component

  M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.

  Weidmüller Pepperl+Fuchs/PACTware M&M Software WI Manager
  Jan 22, 2021