Weidmueller vulnerabilities | LiveThreat CVE Feed

CVE	Product	CVSS	EPSS	Published	Summary
CVE-2025-41712	EM ENERGY METER 750-24 (2540900000) Weidmueller	6.5	0%	Mar 10	Incorrect Permission Assignment on power analyzer
CVE-2025-41711	EM ENERGY METER 750-230 (2540910000) Weidmueller	5.3	0%	Mar 10	Use of a Broken or Risky Cryptographic Algorithm for firmware images of power analyzer
CVE-2025-41710	EM ENERGY METER 750-230 (2540910000) Weidmueller	6.5	0%	Mar 10	Use of Hard-coded Credentials in power analyzer
CVE-2025-41709	EM ENERGY METER 750-230 (2540910000) Weidmueller	9.8	2%	Mar 10	Command injection in power analyzer via Modbus-TCP and Modbus-RTU
CVE-2025-41687	IE IE-SR-2TX-WL-4G-US-V Weidmueller	9.8	1%	Jul 23	Weidmueller: Unauthenticated Stack-Based Buffer Overflow in u-link Management API
CVE-2025-41684	IE IE-SR-2TX-WL Weidmueller	8.8	1%	Jul 23	Weidmueller: Root Command Injection via Unsanitized Input in tls_iotgen_setting Endpoint
CVE-2025-41683	IE IE-SR-2TX-WL-4G-US-V Weidmueller	8.8	1%	Jul 23	Weidmueller: Root Command Injection via Unsanitized Input in event_mail_test Endpoint
CVE-2022-3073	FI FP Iot Md01 Lan S2 00011 Firmware Weidmueller	6.1	0%	Dec 14	Quanos "SCHEMA ST4" example web templates in version Bootstrap 2019 v2/2021 v1/2022 v1/2022 SP1 v1 or below are prone to JavaScript injection allowing a remote attacker to hijack…
CVE-2021-33539	IF Ie-wlt-bl-ap-cl-eu Firmware Weidmueller	7.2	1%	Jun 25	In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing
CVE-2021-33538	IF Ie-wl-bl-ap-cl-us Firmware Weidmueller	8.8	1%	Jun 25	In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs account settings functionality
CVE-2021-33537	IF Ie-wlt-vl-ap-br-cl-us Firmware Weidmueller	8.8	2%	Jun 25	In Weidmueller Industrial WLAN devices in multiple versions an exploitable remote code execution vulnerability exists in the iw_webs configuration parsing functionality
CVE-2021-33536	IF Ie-wl-vl-ap-br-cl-eu Firmware Weidmueller	7.5	1%	Jun 25	In Weidmueller Industrial WLAN devices in multiple versions an exploitable denial-of-service vulnerability exists in ServiceAgent functionality
CVE-2021-33535	IF Ie-wlt-vl-ap-br-cl-us Firmware Weidmueller	8.8	2%	Jun 25	In Weidmueller Industrial WLAN devices in multiple versions an exploitable format string vulnerability exists in the iw_console conio_writestr functionality
CVE-2021-33534	IF Ie-wl-vl-ap-br-cl-us Firmware Weidmueller	7.2	2%	Jun 25	In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the hostname functionality
CVE-2021-33533	IF Ie-wl-bl-ap-cl-eu Firmware Weidmueller	8.8	2%	Jun 25	In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionality
CVE-2021-33532	IF Ie-wlt-vl-ap-br-cl-us Firmware Weidmueller	8.8	2%	Jun 25	In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionality
CVE-2021-33531	IF Ie-wlt-vl-ap-br-cl-eu Firmware Weidmueller	8.8	1%	Jun 25	In Weidmueller Industrial WLAN devices in multiple versions an exploitable use of hard-coded credentials vulnerability exists in multiple iw_* utilities
CVE-2021-33530	IF Ie-wl-vl-ap-br-cl-us Firmware Weidmueller	8.8	2%	Jun 25	In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the devices
CVE-2021-33529	IF Ie-wl-vl-ap-br-cl-us Firmware Weidmueller	7.5	1%	Jun 25	In Weidmueller Industrial WLAN devices in multiple versions the usage of hard-coded cryptographic keys within the service agent binary allows for the decryption of captured…
CVE-2021-33528	IF Ie-wl-vl-ap-br-cl-us Firmware Weidmueller	8.8	1%	Jun 25	In Weidmueller Industrial WLAN devices in multiple versions an exploitable privilege escalation vulnerability exists in the iw_console functionality
CVE-2021-20999	IF Iot-gw30-4g-eu Firmware Weidmueller	9.8	1%	May 13	In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network…
CVE-2020-12525	WM WI Manager Weidmueller	7.8	1%	Jan 22	M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage
CVE-2019-16674	IF Ie-sw-pl08mt-6tx-2scs Firmware Weidmueller	9.8	2%	Dec 6	An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices
CVE-2019-16673	IF Ie-sw-pl08m-6tx-2scs Firmware Weidmueller	6.5	1%	Dec 6	An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices
CVE-2019-16672	IF Ie-sw-vl08mt-8tx Firmware Weidmueller	9.8	1%	Dec 6	An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices
CVE-2019-16671	IF Ie-sw-vl08mt-6tx-2sc Firmware Weidmueller	6.5	2%	Dec 6	An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices
CVE-2019-16670	IF Ie-sw-pl08mt-6tx-2sc Firmware Weidmueller	9.8	2%	Dec 6	An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices