Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-41687 EUVD-2025-22434GHSA-mc82-ffc8-67rq

Weidmueller: Unauthenticated Stack-Based Buffer Overflow in u-link Management API

Published Jul 23, 2025 · Updated Jul 23, 2025 · Assigned by CERTVDE

Vendor: Weidmueller Product: IE-SR-2TX-WL Product: IE-SR-2TX-WL-4G-EU Product: IE-SR-2TX-WL-4G-US-V

Description

An unauthenticated remote attacker may use a stack based buffer overflow in the u-link Management API to gain full access on the affected devices.

Affected products

VendorProductAffectedFixed
Weidmueller IE-SR-2TX-WL V0.0 – < V1.49 V1.49
Weidmueller IE-SR-2TX-WL-4G-EU V0.0 – < V1.62 V1.62
Weidmueller IE-SR-2TX-WL-4G-US-V V0.0 – < V1.62 V1.62

Advisories 1

References