CVE-2025-41649 — Weidmueller: Out-of-Bounds Write Vulnerability in Industrial Ethernet Switches

Description (CNA)

An unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer, potentially leading to a denial-of-service condition for the devices.

Affected (CNA)

Vendor / product	Versions
Weidmueller / IE-SW-VL05M-5TX	affected 0.0.0 before 3.6.32
Weidmueller / IE-SW-VL05MT-5TX	affected 0.0.0 before 3.6.32
Weidmueller / IE-SW-VL08MT-8TX	affected 0.0.0 before 3.5.36
Weidmueller / IE-SW-VL08MT-5TX-1SC-2SCS	affected 0.0.0 before 3.5.36
Weidmueller / IE-SW-VL08MT-6TX-2SC	affected 0.0.0 before 3.5.36
Weidmueller / IE-SW-VL08MT-6TX-2ST	affected 0.0.0 before 3.5.36
Weidmueller / IE-SW-VL08MT-6TX-2SCS	affected 0.0.0 before 3.5.36
Weidmueller / IE-SW-PL10M-3GT-7TX	affected 0.0.0 before 3.3.34
Weidmueller / IE-SW-PL10MT-3GT-7TX	affected 0.0.0 before 3.3.34
Weidmueller / IE-SW-PL16M-16TX	affected 0.0.0 before 3.4.32
Weidmueller / IE-SW-PL16MT-16TX	affected 0.0.0 before 3.4.32
Weidmueller / IE-SW-PL18M-2GC-16TX	affected 0.0.0 before 3.4.40
Weidmueller / IE-SW-PL18MT-2GC-16TX	affected 0.0.0 before 3.4.40

CWE

CWE-787

References

https://certvde.com/en/advisories/VDE-2025-044/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.