Description
In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionality. A specially crafted iw_serverip parameter can cause user input to be reflected in a subsequent iw_system call, resulting in remote control over the device. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Weidmüller | IE-WL(T)-BL-AP-CL-XX | IE-WL-BL-AP-CL-EU (2536600000) – ≤ V1.16.18 (Build 18081617), IE-WLT-BL-AP-CL-EU (2536650000) – ≤ V1.16.18 (Build 18081617), IE-WL-BL-AP-CL-US (2536660000) – ≤ V1.16.18 (Build 18081617), IE-WLT-BL-AP-CL-US (2536670000) – ≤ V1.16.18 (Build 18081617) | — |
| Weidmüller | IE-WL(T)-VL-AP-CL-XX | IE-WL-VL-AP-BR-CL-EU (2536680000) – ≤ V1.11.10 (Build 18122616), IE-WLT-VL-AP-BR-CL-EU (2536690000) – ≤ V1.11.10 (Build 18122616), IE-WL-VL-AP-BR-CL-US (2536700000) – ≤ V1.11.10 (Build 18122616), IE-WLT-VL-AP-BR-CL-US (2536710000) – ≤ V1.11.10 (Build 18122616) | — |
Advisories 1
- VDE-2021-026 Weidmueller: Multiple vulnerabilities in Industrial WLAN devices CERT@VDE · May 14, 2025