Tk500 V2
Monthly
Command injection in the IPsec VPN configuration function of Welotec TK100, TK500-v2, and TK500-v3 routers allows a remote attacker who already holds high administrative privileges to inject system commands that run with root privileges. The flaw is network-reachable and needs no user interaction, but the PR:H prerequisite limits it to authenticated high-privileged users; successful exploitation gives full confidentiality, integrity, and availability impact on the device. No public exploit identified at time of analysis, and the independent assessment treats this as a genuine but conditional priority rather than a drop-everything emergency (this_week).
OS command injection in the Digital I/O function of Welotec TK100, TK500-v2 and TK500-v3 gateways allows a remote attacker holding valid high-privilege credentials to inject operating system commands that execute with root privileges, giving full control of the device (CWE-78). All three product lines are listed without version constraints, so every TK100, TK500-v2 and TK500-v3 build should be treated as affected until the vendor's advisory clarifies fixed releases. Exploitation is access-gated rather than open: the attacker must reach the management/configuration interface and already be an authenticated administrative or operator-level user able to invoke the Digital I/O function, and no public exploit has been identified at time of analysis; vuln.today places remediation on a this-week cadence rather than an emergency one.
OS command injection in the WireGuard VPN configuration function of Welotec TK100, TK500-v2 and TK500-v3 industrial routers lets an attacker who already holds administrative access to the device management interface inject and run system commands as root, with no user interaction required. Because the prerequisite is high-privileged management access, this is not a pre-authentication or low-privilege flaw; the practical risk is privilege escalation from an admin-level account or management-plane compromise to full root control of the router. Per the CERTVDE advisory (VDE-2026-119) the issue is improper input validation (CWE-77); no public exploit code or proof-of-concept is identified in the available data, no CISA KEV entry is associated, and EPSS scoring was not available at time of analysis.
Command injection in the ZeroTier VPN function of Welotec TK100 and TK500-v2/v3 devices allows an authenticated attacker with high administrative privileges to inject system commands that execute with root privileges, with high impact to confidentiality, integrity, and availability. The flaw is network-reachable with low attack complexity and no user interaction, but the PR:H requirement means exploitation is limited to actors who already hold administrative-level access to the device. CVSS 4.0 assigns a base score of 8.6 (High); no public exploit was identified at time of analysis.
OS command injection in Welotec TK100, TK500-v2, and TK500-v3 routers allows an authenticated administrator to execute arbitrary commands with root privileges through the management control functions. The flaw is network-reachable and low-complexity, but exploitation is gated by high-privilege access (CVSS PR:H); no public exploit was identified at time of analysis and active exploitation is not confirmed. CERT@VDE tracks it under advisory VDE-2026-119, and vuln.today assigns a this-week remediation priority.
Denial of service in the Digital I/O function of Welotec TK100, TK500-v2 and TK500-v3 industrial routers lets a remote attacker who already holds high-privilege credentials crash or disrupt availability through insufficient bounds checking. The flaw is a buffer overflow class issue (CWE-120) with a CVSS 4.0 base score of 6.9; confidentiality and integrity are unaffected. No public exploit code was identified at time of analysis, and exploitation is constrained by the high-privilege authentication requirement.
Command injection in the IPsec VPN configuration function of Welotec TK100, TK500-v2, and TK500-v3 routers allows a remote attacker who already holds high administrative privileges to inject system commands that run with root privileges. The flaw is network-reachable and needs no user interaction, but the PR:H prerequisite limits it to authenticated high-privileged users; successful exploitation gives full confidentiality, integrity, and availability impact on the device. No public exploit identified at time of analysis, and the independent assessment treats this as a genuine but conditional priority rather than a drop-everything emergency (this_week).
OS command injection in the Digital I/O function of Welotec TK100, TK500-v2 and TK500-v3 gateways allows a remote attacker holding valid high-privilege credentials to inject operating system commands that execute with root privileges, giving full control of the device (CWE-78). All three product lines are listed without version constraints, so every TK100, TK500-v2 and TK500-v3 build should be treated as affected until the vendor's advisory clarifies fixed releases. Exploitation is access-gated rather than open: the attacker must reach the management/configuration interface and already be an authenticated administrative or operator-level user able to invoke the Digital I/O function, and no public exploit has been identified at time of analysis; vuln.today places remediation on a this-week cadence rather than an emergency one.
OS command injection in the WireGuard VPN configuration function of Welotec TK100, TK500-v2 and TK500-v3 industrial routers lets an attacker who already holds administrative access to the device management interface inject and run system commands as root, with no user interaction required. Because the prerequisite is high-privileged management access, this is not a pre-authentication or low-privilege flaw; the practical risk is privilege escalation from an admin-level account or management-plane compromise to full root control of the router. Per the CERTVDE advisory (VDE-2026-119) the issue is improper input validation (CWE-77); no public exploit code or proof-of-concept is identified in the available data, no CISA KEV entry is associated, and EPSS scoring was not available at time of analysis.
Command injection in the ZeroTier VPN function of Welotec TK100 and TK500-v2/v3 devices allows an authenticated attacker with high administrative privileges to inject system commands that execute with root privileges, with high impact to confidentiality, integrity, and availability. The flaw is network-reachable with low attack complexity and no user interaction, but the PR:H requirement means exploitation is limited to actors who already hold administrative-level access to the device. CVSS 4.0 assigns a base score of 8.6 (High); no public exploit was identified at time of analysis.
OS command injection in Welotec TK100, TK500-v2, and TK500-v3 routers allows an authenticated administrator to execute arbitrary commands with root privileges through the management control functions. The flaw is network-reachable and low-complexity, but exploitation is gated by high-privilege access (CVSS PR:H); no public exploit was identified at time of analysis and active exploitation is not confirmed. CERT@VDE tracks it under advisory VDE-2026-119, and vuln.today assigns a this-week remediation priority.
Denial of service in the Digital I/O function of Welotec TK100, TK500-v2 and TK500-v3 industrial routers lets a remote attacker who already holds high-privilege credentials crash or disrupt availability through insufficient bounds checking. The flaw is a buffer overflow class issue (CWE-120) with a CVSS 4.0 base score of 6.9; confidentiality and integrity are unaffected. No public exploit code was identified at time of analysis, and exploitation is constrained by the high-privilege authentication requirement.