Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 30

Export CSV
CVE-2026-63587

SMS Password Authorization Bypass via Failed Attempt Counter

The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically disabled. An unauthenticated remote attacker who is able to send SMS messages to the device can deliberately trigger this by submitting 5 or more invalid passwords, after which subsequent SMS commands are executed without requiring a password, resulting in potential limited configuration tampering, limited information leakage and potentially full loss of availability.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Weidmueller
Products
Fwr Ie Sr 2tx Wl 4g Eu Us
CVE-2026-63586

Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system() function. By submitting a specially crafted username containing shell metacharacters, an unauthenticated attacker with network access to the device can escape the command context and execute arbitrary commands with root privileges.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Weidmueller
Products
Fwr Ie Sr 2tx Wl Fwr Ie Sr 2tx Wl 4g Eu Us
CVE-2026-16462

SQL injection via unauthenticated GetGridData endpoint

In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows a remote unauthenticated attacker to execute arbitrary SQL commands.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Weidmueller
Products
Procon Web Scada
CVE-2025-41683

Weidmueller: Root Command Injection via Unsanitized Input in event_mail_test Endpoint

An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of improper sanitizing of user input in the Main Web Interface (endpoint event_mail_test).

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Weidmueller
Products
Ie-sr-2tx-wl Ie-sr-2tx-wl-4g-eu Ie-sr-2tx-wl-4g-us-v
CVE-2025-41684

Weidmueller: Root Command Injection via Unsanitized Input in tls_iotgen_setting Endpoint

An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of improper sanitizing of user input in the Main Web Interface (endpoint tls_iotgen_setting).

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Weidmueller
Products
Ie-sr-2tx-wl Ie-sr-2tx-wl-4g-eu Ie-sr-2tx-wl-4g-us-v
CVE-2022-3073

Quaonos Schema ST4 example templates prone to XSS

Quanos "SCHEMA ST4" example web templates in version Bootstrap 2019 v2/2021 v1/2022 v1/2022 SP1 v1 or below are prone to JavaScript injection allowing a remote attacker to hijack existing sessions to e.g. other web services in the same environment or execute scripts in the users browser environment. The affected script is '*-schema.js'.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Weidmueller
Products
19 Iot Md01 Lan H4 S0011 19 Iot Md01 Lan H4 S0011 Firmware Fp Iot Md01 4eu S2 00000 and 15 more
CVE-2021-33539

WEIDMUELLER: WLAN devices affected by authentication bypass vulnerability

In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. A specially configured device hostname can cause the device to interpret selected remote traffic as local traffic, resulting in a bypass of web authentication. An attacker can send authenticated SNMP requests to trigger this vulnerability.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Weidmueller
Products
Ie-wl-bl-ap-cl-eu Ie-wl-bl-ap-cl-eu Firmware Ie-wl-bl-ap-cl-us and 13 more
CVE-2021-33538

WEIDMUELLER: WLAN devices affected by improper access control vulnerability

In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs account settings functionality. A specially crafted user name entry can cause the overwrite of an existing user account password, resulting in remote shell access to the device as that user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.

CVSS 3.1 · 8.8 High EPSS 1.0% KEV · Not listed
Vendors
Weidmueller
Products
Ie-wl-bl-ap-cl-eu Ie-wl-bl-ap-cl-eu Firmware Ie-wl-bl-ap-cl-us and 13 more
CVE-2021-33537

WEIDMUELLER: WLAN devices affected by Remote Code Execution (RCE) vulnerability

In Weidmueller Industrial WLAN devices in multiple versions an exploitable remote code execution vulnerability exists in the iw_webs configuration parsing functionality. A specially crafted user name entry can cause an overflow of an error message buffer, resulting in remote code execution. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed
Vendors
Weidmueller
Products
Ie-wl-bl-ap-cl-eu Ie-wl-bl-ap-cl-eu Firmware Ie-wl-bl-ap-cl-us and 13 more
CVE-2021-33536

WEIDMUELLER: WLAN devices affected by Denial-of-Service vulnerability

In Weidmueller Industrial WLAN devices in multiple versions an exploitable denial-of-service vulnerability exists in ServiceAgent functionality. A specially crafted packet can cause an integer underflow, triggering a large memcpy that will access unmapped or out-of-bounds memory. An attacker can send this packet while unauthenticated to trigger this vulnerability.

CVSS 3.1 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Weidmueller
Products
Ie-wl-bl-ap-cl-eu Ie-wl-bl-ap-cl-eu Firmware Ie-wl-bl-ap-cl-us and 13 more
CVE-2021-33535

WEIDMUELLER: WLAN devices affected by exploitable format string vulnerability

In Weidmueller Industrial WLAN devices in multiple versions an exploitable format string vulnerability exists in the iw_console conio_writestr functionality. A specially crafted time server entry can cause an overflow of the time server buffer, resulting in remote code execution. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed
Vendors
Weidmueller
Products
Ie-wl-bl-ap-cl-eu Ie-wl-bl-ap-cl-eu Firmware Ie-wl-bl-ap-cl-us and 13 more
CVE-2021-33534

WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the hostname functionality. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device. An attacker can send various requests while authenticated as a high privilege user to trigger this vulnerability.

CVSS 3.1 · 7.2 High EPSS 2.1% KEV · Not listed
Vendors
Weidmueller
Products
Ie-wl-bl-ap-cl-eu Ie-wl-bl-ap-cl-eu Firmware Ie-wl-bl-ap-cl-us and 13 more
CVE-2021-33533

WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionality. A specially crafted iw_serverip parameter can cause user input to be reflected in a subsequent iw_system call, resulting in remote control over the device. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.

CVSS 3.1 · 8.8 High EPSS 1.7% KEV · Not listed
Vendors
Weidmueller
Products
Ie-wl-bl-ap-cl-eu Ie-wl-bl-ap-cl-eu Firmware Ie-wl-bl-ap-cl-us and 13 more
CVE-2021-33532

WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionality. A specially crafted diagnostic script file name can cause user input to be reflected in a subsequent iw_system call, resulting in remote control over the device. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.

CVSS 3.1 · 8.8 High EPSS 1.7% KEV · Not listed
Vendors
Weidmueller
Products
Ie-wl-bl-ap-cl-eu Ie-wl-bl-ap-cl-eu Firmware Ie-wl-bl-ap-cl-us and 13 more
CVE-2021-33531

WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability

In Weidmueller Industrial WLAN devices in multiple versions an exploitable use of hard-coded credentials vulnerability exists in multiple iw_* utilities. The device operating system contains an undocumented encryption password, allowing for the creation of custom diagnostic scripts. An attacker can send diagnostic scripts while authenticated as a low privilege user to trigger this vulnerability.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Weidmueller
Products
Ie-wl-bl-ap-cl-eu Ie-wl-bl-ap-cl-eu Firmware Ie-wl-bl-ap-cl-us and 13 more