Weidmueller records

20 published records for vendor weidmueller.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

20 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2019-16670No exploit	An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 161weidmueller · ie-sw-pl09m-5gc-4gt firmware · CWE-307 Pre-auth	Critical9.8	—	1.9%	Dec 6, 2019
40Plan	CVE-2019-16674No exploit	An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 161weidmueller · ie-sw-pl09m-5gc-4gt firmware · CWE-330 Pre-auth Weak crypto	Critical9.8	—	1.8%	Dec 6, 2019
39Monitor	CVE-2019-16672No exploit	An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 161weidmueller · ie-sw-pl09m-5gc-4gt firmware · CWE-319 Pre-auth Weak crypto	Critical9.8	—	1.2%	Dec 6, 2019
39Monitor	CVE-2021-20999No exploit	WEIDMUELLER: Accidentally open network port in u-controls and IoT-Gatewaysweidmueller · uc20-wl2000-ac firmware · CWE-668 Pre-auth	Critical9.8	—	0.9%	May 13, 2021
36Monitor	CVE-2021-33532No exploit	WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerabilityweidmueller · ie-wl-bl-ap-cl-eu firmware · CWE-78 RCE Command injection	High8.8	—	1.7%	Jun 25, 2021
36Monitor	CVE-2021-33533No exploit	WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerabilityweidmueller · ie-wl-bl-ap-cl-eu firmware · CWE-78 RCE Command injection	High8.8	—	1.7%	Jun 25, 2021
36Monitor	CVE-2021-33530No exploit	WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerabilityweidmueller · ie-wl-bl-ap-cl-eu firmware · CWE-78 RCE Command injection	High8.8	—	1.7%	Jun 25, 2021
35Monitor	CVE-2021-33535No exploit	WEIDMUELLER: WLAN devices affected by exploitable format string vulnerabilityweidmueller · ie-wl-bl-ap-cl-eu firmware · CWE-134 RCE	High8.8	—	1.6%	Jun 25, 2021
35Monitor	CVE-2021-33537No exploit	WEIDMUELLER: WLAN devices affected by Remote Code Execution (RCE) vulnerabilityweidmueller · ie-wl-bl-ap-cl-eu firmware · CWE-120 RCE Memory safety	High8.8	—	1.6%	Jun 25, 2021
35Monitor	CVE-2021-33528No exploit	WEIDMUELLER: WLAN devices affected by privilege escalation vulnerabilityweidmueller · ie-wl-bl-ap-cl-eu firmware · CWE-710	High8.8	—	1.1%	Jun 25, 2021
35Monitor	CVE-2021-33538No exploit	WEIDMUELLER: WLAN devices affected by improper access control vulnerabilityweidmueller · ie-wl-bl-ap-cl-eu firmware · CWE-269	High8.8	—	1.0%	Jun 25, 2021
35Monitor	CVE-2021-33531No exploit	WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerabilityweidmueller · ie-wl-bl-ap-cl-eu firmware · CWE-798 Hard-coded credentials	High8.8	—	0.7%	Jun 25, 2021
31Monitor	CVE-2020-12525No exploit	WAGO/M&M Software Deserialization of untrusted data in fdtCONTAINER componentemerson · rosemount transmitter interface software · CWE-502 Deserialization	High7.8	—	1.3%	Jan 22, 2021
30Monitor	CVE-2021-33536No exploit	WEIDMUELLER: WLAN devices affected by Denial-of-Service vulnerabilityweidmueller · ie-wl-bl-ap-cl-eu firmware · CWE-191 Pre-auth Memory safety Denial of service	High7.5	—	1.0%	Jun 25, 2021
30Monitor	CVE-2021-33529No exploit	WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerabilityweidmueller · ie-wl-bl-ap-cl-eu firmware · CWE-798 Pre-auth Hard-coded credentials	High7.5	—	0.9%	Jun 25, 2021
29Monitor	CVE-2021-33534No exploit	WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerabilityweidmueller · ie-wl-bl-ap-cl-eu firmware · CWE-78 RCE Command injection	High7.2	—	2.1%	Jun 25, 2021
28Monitor	CVE-2021-33539No exploit	WEIDMUELLER: WLAN devices affected by authentication bypass vulnerabilityweidmueller · ie-wl-bl-ap-cl-eu firmware · CWE-287 Auth bypass	High7.2	—	1.0%	Jun 25, 2021
27Monitor	CVE-2019-16671No exploit	An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 161weidmueller · ie-sw-pl09m-5gc-4gt firmware · CWE-400 Denial of service	Medium6.5	—	1.9%	Dec 6, 2019
26Monitor	CVE-2019-16673No exploit	An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 161weidmueller · ie-sw-pl09m-5gc-4gt firmware · CWE-522 Info leak	Medium6.5	—	1.1%	Dec 6, 2019
24Monitor	CVE-2022-3073No exploit	Quaonos Schema ST4 example templates prone to XSSweidmueller · 19 iot md01 lan h4 s0011 firmware · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Dec 14, 2022

CVE-2019-16670
40Plan
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 161
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
weidmueller · ie-sw-pl09m-5gc-4gt firmwareDec 6, 2019
CVE-2019-16674
40Plan
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 161
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Weak crypto
weidmueller · ie-sw-pl09m-5gc-4gt firmwareDec 6, 2019
CVE-2019-16672
39Monitor
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 161
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Weak crypto
weidmueller · ie-sw-pl09m-5gc-4gt firmwareDec 6, 2019
CVE-2021-20999
39Monitor
WEIDMUELLER: Accidentally open network port in u-controls and IoT-Gateways
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
weidmueller · uc20-wl2000-ac firmwareMay 13, 2021
CVE-2021-33532
36Monitor
WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
weidmueller · ie-wl-bl-ap-cl-eu firmwareJun 25, 2021
CVE-2021-33533
36Monitor
WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
weidmueller · ie-wl-bl-ap-cl-eu firmwareJun 25, 2021
CVE-2021-33530
36Monitor
WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
weidmueller · ie-wl-bl-ap-cl-eu firmwareJun 25, 2021
CVE-2021-33535
35Monitor
WEIDMUELLER: WLAN devices affected by exploitable format string vulnerability
HighCVSS 8.8No exploitEPSS 1%
- RCE
weidmueller · ie-wl-bl-ap-cl-eu firmwareJun 25, 2021
CVE-2021-33537
35Monitor
WEIDMUELLER: WLAN devices affected by Remote Code Execution (RCE) vulnerability
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Memory safety
weidmueller · ie-wl-bl-ap-cl-eu firmwareJun 25, 2021
CVE-2021-33528
35Monitor
WEIDMUELLER: WLAN devices affected by privilege escalation vulnerability
HighCVSS 8.8No exploitEPSS 1%
weidmueller · ie-wl-bl-ap-cl-eu firmwareJun 25, 2021
CVE-2021-33538
35Monitor
WEIDMUELLER: WLAN devices affected by improper access control vulnerability
HighCVSS 8.8No exploitEPSS 1%
weidmueller · ie-wl-bl-ap-cl-eu firmwareJun 25, 2021
CVE-2021-33531
35Monitor
WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Hard-coded credentials
weidmueller · ie-wl-bl-ap-cl-eu firmwareJun 25, 2021
CVE-2020-12525
31Monitor
WAGO/M&M Software Deserialization of untrusted data in fdtCONTAINER component
HighCVSS 7.8No exploitEPSS 1%
- Deserialization
emerson · rosemount transmitter interface softwareJan 22, 2021
CVE-2021-33536
30Monitor
WEIDMUELLER: WLAN devices affected by Denial-of-Service vulnerability
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
weidmueller · ie-wl-bl-ap-cl-eu firmwareJun 25, 2021
CVE-2021-33529
30Monitor
WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
weidmueller · ie-wl-bl-ap-cl-eu firmwareJun 25, 2021
CVE-2021-33534
29Monitor
WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability
HighCVSS 7.2No exploitEPSS 2%
- RCE
- Command injection
weidmueller · ie-wl-bl-ap-cl-eu firmwareJun 25, 2021
CVE-2021-33539
28Monitor
WEIDMUELLER: WLAN devices affected by authentication bypass vulnerability
HighCVSS 7.2No exploitEPSS 1%
- Auth bypass
weidmueller · ie-wl-bl-ap-cl-eu firmwareJun 25, 2021
CVE-2019-16671
27Monitor
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 161
MediumCVSS 6.5No exploitEPSS 1%
- Denial of service
weidmueller · ie-sw-pl09m-5gc-4gt firmwareDec 6, 2019
CVE-2019-16673
26Monitor
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 161
MediumCVSS 6.5No exploitEPSS 1%
- Info leak
weidmueller · ie-sw-pl09m-5gc-4gt firmwareDec 6, 2019
CVE-2022-3073
24Monitor
Quaonos Schema ST4 example templates prone to XSS
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
weidmueller · 19 iot md01 lan h4 s0011 firmwareDec 14, 2022