Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2025-3020

Wiesemann & Theis: Multiple W&T Products are vulnerable to cross-site-scripting

Description

An low privileged remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into several fields of the configuration webpage with limited impact.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Wiesemann & Theis ERP-Gateway 12x Digital Input, 6x Digital Relais

Default version status: unaffected

  • allaffected

Wiesemann & Theis ERP-Gateway 2x Digital Input, 2x Digital Output

Default version status: unaffected

  • allaffected

Wiesemann & Theis ERP-Gateway 2x Digital PoE

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-Alarm 6x6 DigitalWeb-Alarm 6x6 Digital

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-Count 6x Digital

Default version status: unaffected

  • 0 to < 3.79affected

Wiesemann & Theis Web-Graph Air Quality

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-IO 12x Digital Input, 6x Digital Relais

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-IO 12x Digital Input, 6x Digital Relais

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-IO 12x Digital Input, 6x Digital Relais

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-IO Analog-In/Out 2x 0/4..20mA PoE

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-IO Digital 12xIn, 12xOut

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-IO Digital 12xIn, 12xOut

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-IO Digital 12xIn, 12xOut

Default version status: unaffected

  • 0 to < 4.08affected

Wiesemann & Theis Web-IO Digital 12xIn, 12xOut, 1xRS232

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-IO Digital 12xIn, 12xOut, 1xRS232

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-IO Digital 2xIn, 2xOut

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-IO Digital 2xIn, 2xOut

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-IO Digital 2xIn, 2xOut

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-IO Digital Logger 6xIn, 6xOut

Default version status: unaffected

  • 0 to < 3.70affected

Wiesemann & Theis Web-Thermograph 2x

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-Thermograph 8x

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-Thermograph NTC

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-Thermograph NTC PoE

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-Thermograph Pt100 / Pt1000

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-Thermograph Pt100 / Pt1000 PoE

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-Thermograph Relais

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-Thermo-Hygrobarograph

Default version status: unaffected

  • allaffected

Wiesemann & Theis Web-Thermo-Hygrograph

Default version status: unaffected

  • allaffected

References