Weidmüller

14 CVEs across 7 Weidmüller products. Browse Weidmüller vulnerabilities, severities, and proof-of-concept exploits.

Weidmüller products with known CVEs

ProductCVEs
Ie-Wl(t)-Bl-Ap-Cl-Xx12
Ie-Wl(t)-Vl-Ap-Cl-Xx12
Iot-Gw30-4g-Eu (No. 2682630000)1
Iot-Gw30 (No. 2682620000)1
Uc20-Wl2000-Ac (No. 1334950000)1
Uc20-Wl2000-Iot (No. 1334990000)1
Wi Manager1
Weidmüller CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2021-33539High7.22021-06-25In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. A specially c…
CVE-2021-33538High8.82021-06-25In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs account settings functio…
CVE-2021-33537High8.82021-06-25In Weidmueller Industrial WLAN devices in multiple versions an exploitable remote code execution vulnerability exists in the iw_webs configuration parsing func…
CVE-2021-33536High7.52021-06-25In Weidmueller Industrial WLAN devices in multiple versions an exploitable denial-of-service vulnerability exists in ServiceAgent functionality. A specially cr…
CVE-2021-33535High8.82021-06-25In Weidmueller Industrial WLAN devices in multiple versions an exploitable format string vulnerability exists in the iw_console conio_writestr functionality. A…
CVE-2021-33534High7.22021-06-25In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the hostname functionality. A specially cr…
CVE-2021-33533High8.82021-06-25In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionality. A specially cra…
CVE-2021-33532High8.82021-06-25In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionality. A specially cra…
CVE-2021-33531High8.82021-06-25In Weidmueller Industrial WLAN devices in multiple versions an exploitable use of hard-coded credentials vulnerability exists in multiple iw_* utilities. The d…
CVE-2021-33530High8.82021-06-25In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in encrypted diagnostic script functionality…
CVE-2021-33529High7.52021-06-25In Weidmueller Industrial WLAN devices in multiple versions the usage of hard-coded cryptographic keys within the service agent binary allows for the decryptio…
CVE-2021-33528High8.82021-06-25In Weidmueller Industrial WLAN devices in multiple versions an exploitable privilege escalation vulnerability exists in the iw_console functionality. A special…
CVE-2021-20999Critical9.42021-05-13In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via extern…
CVE-2020-12525High7.32021-01-22M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its pro…