Description (CNA)
In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting this vulnerability the device may be manipulated or the operation may be stopped.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Weidmüller / UC20-WL2000-AC (No. 1334950000) | affected 1.3.0 through 1.9.0; affected 1.10.0 through 1.10.2; affected 1.11.0 through 1.12.1 |
| Weidmüller / UC20-WL2000-IOT (No. 1334990000) | affected 1.3.0 through 1.9.0; affected 1.10.0 through 1.10.2; affected 1.11.0 through 1.12.1 |
| Weidmüller / IOT-GW30 (No. 2682620000) | affected 1.3.0 through 1.9.0; affected 1.10.0 through 1.10.2; affected 1.11.0 through 1.12.1 |
| Weidmüller / IOT-GW30-4G-EU (No. 2682630000) | affected 1.3.0 through 1.9.0; affected 1.10.0 through 1.10.2; affected 1.11.0 through 1.12.1 |
CWE
CWE-668
References
ADP enrichment
No English description supplied.