Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2021-33539

WEIDMUELLER: WLAN devices affected by authentication bypass vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. A specially configured device hostname can cause the device to interpret selected remote traffic as local traffic, resulting in a bypass of web authentication. An attacker can send authenticated SNMP requests to trigger this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Weidmüller IE-WL(T)-BL-AP-CL-XX

  • IE-WL-BL-AP-CL-EU (2536600000) to ≤ V1.16.18 (Build 18081617)affected
  • IE-WLT-BL-AP-CL-EU (2536650000) to ≤ V1.16.18 (Build 18081617)affected
  • IE-WL-BL-AP-CL-US (2536660000) to ≤ V1.16.18 (Build 18081617)affected
  • IE-WLT-BL-AP-CL-US (2536670000) to ≤ V1.16.18 (Build 18081617)affected

Weidmüller IE-WL(T)-VL-AP-CL-XX

  • IE-WL-VL-AP-BR-CL-EU (2536680000) to ≤ V1.11.10 (Build 18122616)affected
  • IE-WLT-VL-AP-BR-CL-EU (2536690000) to ≤ V1.11.10 (Build 18122616)affected
  • IE-WL-VL-AP-BR-CL-US (2536700000) to ≤ V1.11.10 (Build 18122616)affected
  • IE-WLT-VL-AP-BR-CL-US (2536710000) to ≤ V1.11.10 (Build 18122616)affected

References