CVE-2025-41684 — Weidmueller: Root Command Injection via Unsanitized Input in tls_iotgen_setting Endpoint

CVE-2025-41684

Weidmueller: Root Command Injection via Unsanitized Input in tls_iotgen_setting Endpoint PUBLISHED

Description (CNA)

An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of improper sanitizing of user input in the Main Web Interface (endpoint tls_iotgen_setting).

Affected (CNA)

Vendor / product	Versions
Weidmueller / IE-SR-2TX-WL	affected V0.0 before V1.49
Weidmueller / IE-SR-2TX-WL-4G-EU	affected V0.0 before V1.62
Weidmueller / IE-SR-2TX-WL-4G-US-V	affected V0.0 before V1.62

CWE

CWE-78

References

https://certvde.com/de/advisories/VDE-2025-052

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.