Description (CNA)
Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Weidmueller / IE-SW-VL05M-5TX | affected 0.0.0 before 3.6.32 |
| Weidmueller / IE-SW-VL05MT-5TX | affected 0.0.0 before 3.6.32 |
| Weidmueller / IE-SW-VL08MT-8TX | affected 0.0.0 before 3.5.36 |
| Weidmueller / IE-SW-VL08MT-5TX-1SC-2SCS | affected 0.0.0 before 3.5.36 |
| Weidmueller / IE-SW-VL08MT-6TX-2SC | affected 0.0.0 before 3.5.36 |
| Weidmueller / IE-SW-VL08MT-6TX-2ST | affected 0.0.0 before 3.5.36 |
| Weidmueller / IE-SW-VL08MT-6TX-2SCS | affected 0.0.0 before 3.5.36 |
| Weidmueller / IE-SW-PL10M-3GT-7TX | affected 0.0.0 before 3.3.34 |
| Weidmueller / IE-SW-PL10MT-3GT-7TX | affected 0.0.0 before 3.3.34 |
| Weidmueller / IE-SW-PL16M-16TX | affected 0.0.0 before 3.4.32 |
| Weidmueller / IE-SW-PL16MT-16TX | affected 0.0.0 before 3.4.32 |
| Weidmueller / IE-SW-PL18M-2GC-16TX | affected 0.0.0 before 3.4.40 |
| Weidmueller / IE-SW-PL18MT-2GC-16TX | affected 0.0.0 before 3.4.40 |
CWE
CWE-306
References
ADP enrichment
No English description supplied.
No references supplied.