Description
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Authentication Information used in a cookie is predictable and can lead to admin password compromise when captured on the network.
Advisories 2
- VDE-2019-018 Weidmueller: multiple vulnerabilities in various Industrial Ethernet managed switches CERT@VDE · May 22, 2025
- ICSA-19-339-02 Weidmueller Industrial Ethernet Switches CISA ICS & IT advisories · Dec 5, 2019