Description
For u-link Management API an unauthenticated remote attacker in a man-in-the-middle position can inject arbitrary commands in responses returned by WWH servers, which are then executed with elevated privileges. To get into such a position, clients would need to use insecure proxy configurations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Weidmueller | IE-SR-2TX-WL | < V1.49 | V1.49 |
| Weidmueller | IE-SR-2TX-WL-4G-EU | < V1.62 | V1.62 |
| Weidmueller | IE-SR-2TX-WL-4G-US-V | < V1.62 | V1.62 |
Advisories 1
- VDE-2025-052 Weidmueller: Security routers IE-SR-2TX are affected by multiple vulnerabilities CERT@VDE · Jul 23, 2025