Skip to main content

Weidmueller

19 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2022-3073 Dec 14, 09:15 MEDIUM This Month

Quanos "SCHEMA ST4" example web templates in version Bootstrap 2019 v2/2021 v1/2022 v1/2022 SP1 v1 or below are prone to JavaScript injection allowing a remote attacker to hijack existing sessions to. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Uc20 Wl2000 Ac Firmware Uc20 Wl2000 Iot Firmware Iot Gw30 Firmware Iot Gw30 4G Eu Firmware +6
NVD
CVSS 3.1
6.1
EPSS
0.5%
CVE-2021-33539 Jun 25, 19:15 HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware Ie Wl Bl Ap Cl Us Firmware Ie Wlt Bl Ap Cl Us Firmware +5
NVD
CVSS 3.1
7.2
EPSS
1.1%
CVE-2021-33538 Jun 25, 19:15 HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs account settings functionality. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware Ie Wl Bl Ap Cl Us Firmware Ie Wlt Bl Ap Cl Us Firmware +5
NVD
CVSS 3.1
8.8
EPSS
1.0%
CVE-2021-33537 Jun 25, 19:15 HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable remote code execution vulnerability exists in the iw_webs configuration parsing functionality. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware Ie Wl Bl Ap Cl Us Firmware +6
NVD
CVSS 3.1
8.8
EPSS
1.6%
CVE-2021-33536 Jun 25, 19:15 HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable denial-of-service vulnerability exists in ServiceAgent functionality. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Integer Overflow Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware Ie Wl Bl Ap Cl Us Firmware +6
NVD
CVSS 3.1
7.5
EPSS
1.0%
CVE-2021-33535 Jun 25, 19:15 HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable format string vulnerability exists in the iw_console conio_writestr functionality. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware Ie Wl Bl Ap Cl Us Firmware Ie Wlt Bl Ap Cl Us Firmware +5
NVD
CVSS 3.1
8.8
EPSS
1.6%
CVE-2021-33534 Jun 25, 19:15 HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the hostname functionality. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware Ie Wl Bl Ap Cl Us Firmware Ie Wlt Bl Ap Cl Us Firmware +5
NVD
CVSS 3.1
7.2
EPSS
2.1%
CVE-2021-33533 Jun 25, 19:15 HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionality. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware Ie Wl Bl Ap Cl Us Firmware Ie Wlt Bl Ap Cl Us Firmware +5
NVD
CVSS 3.1
8.8
EPSS
1.7%
CVE-2021-33532 Jun 25, 19:15 HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionality. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware Ie Wl Bl Ap Cl Us Firmware Ie Wlt Bl Ap Cl Us Firmware +5
NVD
CVSS 3.1
8.8
EPSS
1.7%
CVE-2021-33531 Jun 25, 19:15 HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable use of hard-coded credentials vulnerability exists in multiple iw_* utilities. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware Ie Wl Bl Ap Cl Us Firmware Ie Wlt Bl Ap Cl Us Firmware +5
NVD
CVSS 3.1
8.8
EPSS
0.7%
CVE-2021-33530 Jun 25, 19:15 HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the devices. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware Ie Wl Bl Ap Cl Us Firmware Ie Wlt Bl Ap Cl Us Firmware +5
NVD
CVSS 3.1
8.8
EPSS
1.7%
CVE-2021-33529 Jun 25, 19:15 HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions the usage of hard-coded cryptographic keys within the service agent binary allows for the decryption of captured traffic across the network. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware Ie Wl Bl Ap Cl Us Firmware Ie Wlt Bl Ap Cl Us Firmware +5
NVD
CVSS 3.1
7.5
EPSS
0.9%
CVE-2021-33528 Jun 25, 19:15 HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable privilege escalation vulnerability exists in the iw_console functionality. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware Ie Wl Bl Ap Cl Us Firmware Ie Wlt Bl Ap Cl Us Firmware +5
NVD
CVSS 3.1
8.8
EPSS
1.1%
CVE-2021-20999 May 13, 14:15 CRITICAL Act Now

In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Uc20 Wl2000 Ac Firmware Uc20 Wl2000 Iot Firmware Iot Gw30 Firmware Iot Gw30 4G Eu Firmware +1
NVD
CVSS 3.1
9.8
EPSS
0.9%
CVE-2019-16674 Dec 06, 18:15 CRITICAL Act Now

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Ie Sw Pl09M 5Gc 4Gt Firmware Ie Sw Pl09Mt 5Gc 4Gt Firmware Ie Sw Pl18M 2Gc 16Tx Firmware Ie Sw Pl18Mt 2Gc 16Tx Firmware +37
NVD
CVSS 3.1
9.8
EPSS
1.9%
CVE-2019-16673 Dec 06, 18:15 MEDIUM This Month

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Ie Sw Pl09M 5Gc 4Gt Firmware Ie Sw Pl09Mt 5Gc 4Gt Firmware Ie Sw Pl18M 2Gc 16Tx Firmware Ie Sw Pl18Mt 2Gc 16Tx Firmware +37
NVD
CVSS 3.1
6.5
EPSS
1.1%
CVE-2019-16672 Dec 06, 18:15 CRITICAL Act Now

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Ie Sw Pl09M 5Gc 4Gt Firmware Ie Sw Pl09Mt 5Gc 4Gt Firmware Ie Sw Pl18M 2Gc 16Tx Firmware Ie Sw Pl18Mt 2Gc 16Tx Firmware +37
NVD
CVSS 3.1
9.8
EPSS
1.3%
CVE-2019-16671 Dec 06, 18:15 MEDIUM This Month

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Ie Sw Pl09M 5Gc 4Gt Firmware Ie Sw Pl09Mt 5Gc 4Gt Firmware Ie Sw Pl18M 2Gc 16Tx Firmware Ie Sw Pl18Mt 2Gc 16Tx Firmware +37
NVD
CVSS 3.1
6.5
EPSS
1.9%
CVE-2019-16670 Dec 06, 18:15 CRITICAL Act Now

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Ie Sw Pl09M 5Gc 4Gt Firmware Ie Sw Pl09Mt 5Gc 4Gt Firmware Ie Sw Pl18M 2Gc 16Tx Firmware Ie Sw Pl18Mt 2Gc 16Tx Firmware +37
NVD
CVSS 3.1
9.8
EPSS
2.0%
CVE-2022-3073
EPSS 0% CVSS 6.1
MEDIUM This Month

Quanos "SCHEMA ST4" example web templates in version Bootstrap 2019 v2/2021 v1/2022 v1/2022 SP1 v1 or below are prone to JavaScript injection allowing a remote attacker to hijack existing sessions to. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Uc20 Wl2000 Ac Firmware Uc20 Wl2000 Iot Firmware +8
NVD
CVE-2021-33539
EPSS 1% CVSS 7.2
HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware +7
NVD
CVE-2021-33538
EPSS 1% CVSS 8.8
HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs account settings functionality. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware +7
NVD
CVE-2021-33537
EPSS 2% CVSS 8.8
HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable remote code execution vulnerability exists in the iw_webs configuration parsing functionality. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Ie Wl Bl Ap Cl Eu Firmware +8
NVD
CVE-2021-33536
EPSS 1% CVSS 7.5
HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable denial-of-service vulnerability exists in ServiceAgent functionality. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Integer Overflow Ie Wl Bl Ap Cl Eu Firmware +8
NVD
CVE-2021-33535
EPSS 2% CVSS 8.8
HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable format string vulnerability exists in the iw_console conio_writestr functionality. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware +7
NVD
CVE-2021-33534
EPSS 2% CVSS 7.2
HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the hostname functionality. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware +7
NVD
CVE-2021-33533
EPSS 2% CVSS 8.8
HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionality. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware +7
NVD
CVE-2021-33532
EPSS 2% CVSS 8.8
HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionality. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware +7
NVD
CVE-2021-33531
EPSS 1% CVSS 8.8
HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable use of hard-coded credentials vulnerability exists in multiple iw_* utilities. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware +7
NVD
CVE-2021-33530
EPSS 2% CVSS 8.8
HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the devices. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware +7
NVD
CVE-2021-33529
EPSS 1% CVSS 7.5
HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions the usage of hard-coded cryptographic keys within the service agent binary allows for the decryption of captured traffic across the network. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware +7
NVD
CVE-2021-33528
EPSS 1% CVSS 8.8
HIGH This Week

In Weidmueller Industrial WLAN devices in multiple versions an exploitable privilege escalation vulnerability exists in the iw_console functionality. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Ie Wl Bl Ap Cl Eu Firmware Ie Wlt Bl Ap Cl Eu Firmware +7
NVD
CVE-2021-20999
EPSS 1% CVSS 9.8
CRITICAL Act Now

In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Uc20 Wl2000 Ac Firmware Uc20 Wl2000 Iot Firmware +3
NVD
CVE-2019-16674
EPSS 2% CVSS 9.8
CRITICAL Act Now

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Ie Sw Pl09M 5Gc 4Gt Firmware Ie Sw Pl09Mt 5Gc 4Gt Firmware +39
NVD
CVE-2019-16673
EPSS 1% CVSS 6.5
MEDIUM This Month

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Ie Sw Pl09M 5Gc 4Gt Firmware Ie Sw Pl09Mt 5Gc 4Gt Firmware +39
NVD
CVE-2019-16672
EPSS 1% CVSS 9.8
CRITICAL Act Now

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Ie Sw Pl09M 5Gc 4Gt Firmware Ie Sw Pl09Mt 5Gc 4Gt Firmware +39
NVD
CVE-2019-16671
EPSS 2% CVSS 6.5
MEDIUM This Month

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Ie Sw Pl09M 5Gc 4Gt Firmware Ie Sw Pl09Mt 5Gc 4Gt Firmware +39
NVD
CVE-2019-16670
EPSS 2% CVSS 9.8
CRITICAL Act Now

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Ie Sw Pl09M 5Gc 4Gt Firmware Ie Sw Pl09Mt 5Gc 4Gt Firmware +39
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy