Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-41651 EUVD-2025-27994GHSA-wppq-rwh9-h7pf

Weidmueller: Missing Authentication Vulnerability in Industrial Ethernet Switches

Published May 27, 2025 · Updated May 27, 2025 · Assigned by CERTVDE

Vendor: Weidmueller Product: IE-SW-PL10M-3GT-7TX Product: IE-SW-PL10MT-3GT-7TX Product: IE-SW-PL16M-16TX Product: IE-SW-PL16MT-16TX Product: IE-SW-PL18M-2GC-16TX Product: IE-SW-PL18MT-2GC-16TX Product: IE-SW-VL05M-5TX Product: IE-SW-VL05MT-5TX Product: IE-SW-VL08MT-5TX-1SC-2SCS Product: IE-SW-VL08MT-6TX-2SC Product: IE-SW-VL08MT-6TX-2SCS Product: IE-SW-VL08MT-6TX-2ST Product: IE-SW-VL08MT-8TX

Description

Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise.

Affected products

VendorProductAffectedFixed
Weidmueller IE-SW-VL05M-5TX 0.0.0 – < 3.6.32 3.6.32
Weidmueller IE-SW-VL05MT-5TX 0.0.0 – < 3.6.32 3.6.32
Weidmueller IE-SW-VL08MT-8TX 0.0.0 – < 3.5.36 3.5.36
Weidmueller IE-SW-VL08MT-5TX-1SC-2SCS 0.0.0 – < 3.5.36 3.5.36
Weidmueller IE-SW-VL08MT-6TX-2SC 0.0.0 – < 3.5.36 3.5.36
Weidmueller IE-SW-VL08MT-6TX-2ST 0.0.0 – < 3.5.36 3.5.36
Weidmueller IE-SW-VL08MT-6TX-2SCS 0.0.0 – < 3.5.36 3.5.36
Weidmueller IE-SW-PL10M-3GT-7TX 0.0.0 – < 3.3.34 3.3.34
Weidmueller IE-SW-PL10MT-3GT-7TX 0.0.0 – < 3.3.34 3.3.34
Weidmueller IE-SW-PL16M-16TX 0.0.0 – < 3.4.32 3.4.32
Weidmueller IE-SW-PL16MT-16TX 0.0.0 – < 3.4.32 3.4.32
Weidmueller IE-SW-PL18M-2GC-16TX 0.0.0 – < 3.4.40 3.4.40
Weidmueller IE-SW-PL18MT-2GC-16TX 0.0.0 – < 3.4.40 3.4.40

Advisories 1

References