Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-41653

Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet Switches

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicious header, potentially causing the server to crash or become unresponsive.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Weidmueller IE-SW-VL05M-5TX

Default version status: unaffected

  • 0.0.0 to < 3.6.32affected

Weidmueller IE-SW-VL05MT-5TX

Default version status: unaffected

  • 0.0.0 to < 3.6.32affected

Weidmueller IE-SW-VL08MT-8TX

Default version status: unaffected

  • 0.0.0 to < 3.5.36affected

Weidmueller IE-SW-VL08MT-5TX-1SC-2SCS

Default version status: unaffected

  • 0.0.0 to < 3.5.36affected

Weidmueller IE-SW-VL08MT-6TX-2SC

Default version status: unaffected

  • 0.0.0 to < 3.5.36affected

Weidmueller IE-SW-VL08MT-6TX-2ST

Default version status: unaffected

  • 0.0.0 to < 3.5.36affected

Weidmueller IE-SW-VL08MT-6TX-2SCS

Default version status: unaffected

  • 0.0.0 to < 3.5.36affected

Weidmueller IE-SW-PL10M-3GT-7TX

Default version status: unaffected

  • 0.0.0 to < 3.3.34affected

Weidmueller IE-SW-PL10MT-3GT-7TX

Default version status: unaffected

  • 0.0.0 to < 3.3.34affected

Weidmueller IE-SW-PL16M-16TX

Default version status: unaffected

  • 0.0.0 to < 3.4.32affected

Weidmueller IE-SW-PL16MT-16TX

Default version status: unaffected

  • 0.0.0 to < 3.4.32affected

Weidmueller IE-SW-PL18M-2GC-16TX

Default version status: unaffected

  • 0.0.0 to < 3.4.40affected

Weidmueller IE-SW-PL18MT-2GC-16TX

Default version status: unaffected

  • 0.0.0 to < 3.4.40affected

References