Description
An unauthenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of Cross-Site Request Forgery (CSRF) protection.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Weidmueller | IE-SR-2TX-WL | < V1.49 | V1.49 |
| Weidmueller | IE-SR-2TX-WL-4G-EU | < V1.62 | V1.62 |
| Weidmueller | IE-SR-2TX-WL-4G-US-V | < V1.62 | V1.62 |
Advisories 1
- VDE-2025-052 Weidmueller: Security routers IE-SR-2TX are affected by multiple vulnerabilities CERT@VDE · Jul 23, 2025