CVE-2025-41683 — Weidmueller: Root Command Injection via Unsanitized Input in event_mail_test Endpoint

CVE-2025-41683

Weidmueller: Root Command Injection via Unsanitized Input in event_mail_test Endpoint PUBLISHED

Description (CNA)

An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of improper sanitizing of user input in the Main Web Interface (endpoint event_mail_test).

Affected (CNA)

Vendor / product	Versions
Weidmueller / IE-SR-2TX-WL	affected V0.0 before V1.49
Weidmueller / IE-SR-2TX-WL-4G-EU	affected V0.0 before V1.62
Weidmueller / IE-SR-2TX-WL-4G-US-V	affected V0.0 before V1.62

CWE

CWE-78

References

https://certvde.com/de/advisories/VDE-2025-052

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.