Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-41649

Weidmueller: Out-of-Bounds Write Vulnerability in Industrial Ethernet Switches

Description

An unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer, potentially leading to a denial-of-service condition for the devices.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Weidmueller IE-SW-VL05M-5TX

Default version status: unaffected

  • 0.0.0 to < 3.6.32affected

Weidmueller IE-SW-VL05MT-5TX

Default version status: unaffected

  • 0.0.0 to < 3.6.32affected

Weidmueller IE-SW-VL08MT-8TX

Default version status: unaffected

  • 0.0.0 to < 3.5.36affected

Weidmueller IE-SW-VL08MT-5TX-1SC-2SCS

Default version status: unaffected

  • 0.0.0 to < 3.5.36affected

Weidmueller IE-SW-VL08MT-6TX-2SC

Default version status: unaffected

  • 0.0.0 to < 3.5.36affected

Weidmueller IE-SW-VL08MT-6TX-2ST

Default version status: unaffected

  • 0.0.0 to < 3.5.36affected

Weidmueller IE-SW-VL08MT-6TX-2SCS

Default version status: unaffected

  • 0.0.0 to < 3.5.36affected

Weidmueller IE-SW-PL10M-3GT-7TX

Default version status: unaffected

  • 0.0.0 to < 3.3.34affected

Weidmueller IE-SW-PL10MT-3GT-7TX

Default version status: unaffected

  • 0.0.0 to < 3.3.34affected

Weidmueller IE-SW-PL16M-16TX

Default version status: unaffected

  • 0.0.0 to < 3.4.32affected

Weidmueller IE-SW-PL16MT-16TX

Default version status: unaffected

  • 0.0.0 to < 3.4.32affected

Weidmueller IE-SW-PL18M-2GC-16TX

Default version status: unaffected

  • 0.0.0 to < 3.4.40affected

Weidmueller IE-SW-PL18MT-2GC-16TX

Default version status: unaffected

  • 0.0.0 to < 3.4.40affected

References