weidmueller vulnerabilities

Recent CVEs affecting weidmueller products. 14 tracked.

weidmueller has 14 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 14. Most recent: 2022-12-14. Highest priority: CVE-2021-20999 (score 53/100).

• CVE-2022-3073 MEDIUM 6.1 MITIGATE MITIGATE Quanos "SCHEMA ST4" example web templates in version Bootstrap 2019 v2/2021 v1/2022 v1/2022 SP1 v1 or below ar
• CVE-2021-33539 HIGH 7.2 UPGRADE UPGRADE In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability
• CVE-2021-33538 HIGH 8.8 UPGRADE UPGRADE In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerabili
• CVE-2021-33537 HIGH 8.8 UPGRADE UPGRADE In Weidmueller Industrial WLAN devices in multiple versions an exploitable remote code execution vulnerability
• CVE-2021-33536 HIGH 7.5 UPGRADE UPGRADE In Weidmueller Industrial WLAN devices in multiple versions an exploitable denial-of-service vulnerability exi
• CVE-2021-33535 HIGH 8.8 UPGRADE UPGRADE In Weidmueller Industrial WLAN devices in multiple versions an exploitable format string vulnerability exists
• CVE-2021-33534 HIGH 7.2 UPGRADE UPGRADE In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exi
• CVE-2021-33533 HIGH 8.8 UPGRADE UPGRADE In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exi
• CVE-2021-33532 HIGH 8.8 UPGRADE UPGRADE In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exi
• CVE-2021-33531 HIGH 8.8 UPGRADE UPGRADE In Weidmueller Industrial WLAN devices in multiple versions an exploitable use of hard-coded credentials vulne
• CVE-2021-33530 HIGH 8.8 UPGRADE UPGRADE In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exi
• CVE-2021-33529 HIGH 7.5 UPGRADE UPGRADE In Weidmueller Industrial WLAN devices in multiple versions the usage of hard-coded cryptographic keys within
• CVE-2021-33528 HIGH 8.8 UPGRADE UPGRADE In Weidmueller Industrial WLAN devices in multiple versions an exploitable privilege escalation vulnerability
• CVE-2021-20999 CRITICAL 9.4 UPGRADE UPGRADE In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-int

FAQ

How do I fix weidmueller vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is weidmueller being exploited right now?

None of the tracked weidmueller CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which weidmueller CVE should I patch first?

CVE-2021-20999 currently ranks highest (53/100): In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-int.

Products

• 19 iot md01 lan h4 s0011 firmware
• fp iot md01 4eu s2 00000 firmware
• fp iot md01 lan s2 00000 firmware
• fp iot md01 lan s2 00011 firmware
• fp iot md02 4eu s3 00000 firmware
• ie-wl-bl-ap-cl-eu firmware
• ie-wl-bl-ap-cl-us firmware
• ie-wl-vl-ap-br-cl-eu firmware
• ie-wlt-bl-ap-cl-eu firmware
• ie-wlt-bl-ap-cl-us firmware
• ie-wlt-vl-ap-br-cl-eu firmware
• iot-gw30 firmware
• iot-gw30-4g-eu firmware
• uc20-wl2000-ac firmware
• uc20-wl2000-iot firmware

RSS feed for weidmueller · ← Back to latest CVEs