Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2021-20999

WEIDMUELLER: Accidentally open network port in u-controls and IoT-Gateways

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting this vulnerability the device may be manipulated or the operation may be stopped.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Weidmüller UC20-WL2000-AC (No. 1334950000)

  • 1.3.0 to ≤ 1.9.0affected
  • 1.10.0 to ≤ 1.10.2affected
  • 1.11.0 to ≤ 1.12.1affected

Weidmüller UC20-WL2000-IOT (No. 1334990000)

  • 1.3.0 to ≤ 1.9.0affected
  • 1.10.0 to ≤ 1.10.2affected
  • 1.11.0 to ≤ 1.12.1affected

Weidmüller IOT-GW30 (No. 2682620000)

  • 1.3.0 to ≤ 1.9.0affected
  • 1.10.0 to ≤ 1.10.2affected
  • 1.11.0 to ≤ 1.12.1affected

Weidmüller IOT-GW30-4G-EU (No. 2682630000)

  • 1.3.0 to ≤ 1.9.0affected
  • 1.10.0 to ≤ 1.10.2affected
  • 1.11.0 to ≤ 1.12.1affected

References