Description
Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Weidmueller IE-SW-VL05M-5TX
Default version status: unaffected
0.0.0 to < 3.6.32affected
Weidmueller IE-SW-VL05MT-5TX
Default version status: unaffected
0.0.0 to < 3.6.32affected
Weidmueller IE-SW-VL08MT-8TX
Default version status: unaffected
0.0.0 to < 3.5.36affected
Weidmueller IE-SW-VL08MT-5TX-1SC-2SCS
Default version status: unaffected
0.0.0 to < 3.5.36affected
Weidmueller IE-SW-VL08MT-6TX-2SC
Default version status: unaffected
0.0.0 to < 3.5.36affected
Weidmueller IE-SW-VL08MT-6TX-2ST
Default version status: unaffected
0.0.0 to < 3.5.36affected
Weidmueller IE-SW-VL08MT-6TX-2SCS
Default version status: unaffected
0.0.0 to < 3.5.36affected
Weidmueller IE-SW-PL10M-3GT-7TX
Default version status: unaffected
0.0.0 to < 3.3.34affected
Weidmueller IE-SW-PL10MT-3GT-7TX
Default version status: unaffected
0.0.0 to < 3.3.34affected
Weidmueller IE-SW-PL16M-16TX
Default version status: unaffected
0.0.0 to < 3.4.32affected
Weidmueller IE-SW-PL16MT-16TX
Default version status: unaffected
0.0.0 to < 3.4.32affected
Weidmueller IE-SW-PL18M-2GC-16TX
Default version status: unaffected
0.0.0 to < 3.4.40affected
Weidmueller IE-SW-PL18MT-2GC-16TX
Default version status: unaffected
0.0.0 to < 3.4.40affected