Description
In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting this vulnerability the device may be manipulated or the operation may be stopped.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Weidmüller | UC20-WL2000-AC (No. 1334950000) | 1.3.0 – ≤ 1.9.0, 1.10.0 – ≤ 1.10.2, 1.11.0 – ≤ 1.12.1 | — |
| Weidmüller | UC20-WL2000-IOT (No. 1334990000) | 1.3.0 – ≤ 1.9.0, 1.10.0 – ≤ 1.10.2, 1.11.0 – ≤ 1.12.1 | — |
| Weidmüller | IOT-GW30 (No. 2682620000) | 1.3.0 – ≤ 1.9.0, 1.10.0 – ≤ 1.10.2, 1.11.0 – ≤ 1.12.1 | — |
| Weidmüller | IOT-GW30-4G-EU (No. 2682630000) | 1.3.0 – ≤ 1.9.0, 1.10.0 – ≤ 1.10.2, 1.11.0 – ≤ 1.12.1 | — |
Advisories 1
- VDE-2021-016 Weidmueller: Accidentally open network port in u-controls and IoT-Gateways CERT@VDE · May 14, 2025