https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 13:34:39 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-48140 cnvd-2021-48140 https://cve.radiocsirt.org/vuln/cnvd-2021-48140 https://cve.radiocsirt.org/vuln/euvd-2026-176777 EUVD-2026-176777 https://cve.radiocsirt.org/vuln/euvd-2026-176777 https://cve.radiocsirt.org/vuln/fkie_cve-2021-33538 <p>In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs account settings functionality. A specially crafted user name entry can cause the overwrite of an existing user account password, resulting in remote shell access to the device as that user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.</p> <p>In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs account settings functionality. A specially crafted user name entry can cause the overwrite of an existing user account password, resulting in remote shell access to the device as that user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-33538 https://cve.radiocsirt.org/vuln/ghsa-37w8-w2xc-r5mg <p>In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs account settings functionality. A specially crafted user name entry can cause the overwrite of an existing user account password, resulting in remote shell access to the device as that user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.</p> <p>In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs account settings functionality. A specially crafted user name entry can cause the overwrite of an existing user account password, resulting in remote shell access to the device as that user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-37w8-w2xc-r5mg https://cve.radiocsirt.org/vuln/gsd-2021-33538 gsd-2021-33538 https://cve.radiocsirt.org/vuln/gsd-2021-33538 https://cve.radiocsirt.org/vuln/vde-2021-026 <p>Multiple issues in Weidmueller Industrial WLAN devices have been found.</p> <p>Initial publication date: 2021-06-23 Update A publication date: 2021-07-02</p> <p>Update A</p> <p>CVE-2021-33534</p> <p>CVSS: 7.2 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Description: An exploitable command injection vulnerability exists in the hostname functionality of Weidmueller Industrial WLAN devices. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device. An attacker can send various requests while authenticated as a high privilege user to trigger this vulnerability.</p> <p>Multiple issues in Weidmueller Industrial WLAN devices have been found.</p> <p>Initial publication date: 2021-06-23 Update A publication date: 2021-07-02</p> <p>Update A</p> <p>CVE-2021-33534</p> <p>CVSS: 7.2 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Description: An exploitable command injection vulnerability exists in the hostname functionality of Weidmueller Industrial WLAN devices. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device. An attacker can send various requests while authenticated as a high privilege user to trigger this vulnerability.</p> https://cve.radiocsirt.org/vuln/vde-2021-026