High severity · published Jun 25, 2021
CVE-2021-33528
In Weidmueller Industrial WLAN devices in multiple versions an exploitable privilege escalation vulnerability exists in the iw_console functionality
8.8
CVSS
1.1%
EPSS
No
On KEV
Description
In Weidmueller Industrial WLAN devices in multiple versions an exploitable privilege escalation vulnerability exists in the iw_console functionality. A specially crafted menu selection string can cause an escape from the restricted console, resulting in system access as the root user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IF
Ie-wl-bl-ap-cl-eu Firmware · Weidmueller
through 1.16.18; through 1.11.10 · source: NVD
IF
Ie-wl-bl-ap-cl-us Firmware · Weidmueller
through 1.16.18; through 1.11.10 · source: NVD
IF
Ie-wl-vl-ap-br-cl-eu Firmware · Weidmueller
through 1.16.18; through 1.11.10 · source: NVD
IF
Ie-wl-vl-ap-br-cl-us Firmware · Weidmueller
through 1.16.18; through 1.11.10 · source: NVD
IF
Ie-wlt-bl-ap-cl-eu Firmware · Weidmueller
through 1.16.18; through 1.11.10 · source: NVD
IF
Ie-wlt-bl-ap-cl-us Firmware · Weidmueller
through 1.16.18; through 1.11.10 · source: NVD
IF
Ie-wlt-vl-ap-br-cl-eu Firmware · Weidmueller
through 1.16.18; through 1.11.10 · source: NVD
IF
Ie-wlt-vl-ap-br-cl-us Firmware · Weidmueller
through 1.16.18; through 1.11.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-33528
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-33528
Third Party Advisory
https://cert.vde.com/en-us/advisories/vde-2021-026
More from Ie-wl-bl-ap-cl-eu Firmware
8.8
CVE-2021-33538
In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs account settings functionality
8.8
CVE-2021-33537
In Weidmueller Industrial WLAN devices in multiple versions an exploitable remote code execution vulnerability exists in the iw_webs configuration parsing functionality
8.8
CVE-2021-33535
In Weidmueller Industrial WLAN devices in multiple versions an exploitable format string vulnerability exists in the iw_console conio_writestr functionality
8.8
CVE-2021-33533
In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionality
8.8
CVE-2021-33532
In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionality
