Most recent entries from csaf_weidmuellerinterfacegmbhcokg

VDE-2026-083 — Weidmueller: Security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are affected by multiple vulnerabilities

2026-08-25T09:00:00+00:00

Weidmueller security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are affected by an unauthenticated remote code execution vulnerability. IE-SR-2TX-WL-4G routers are also affected by a SMS password authorization bypass vulnerability.

Weidmueller has released new firmware versions of the affected products to fix the vulnerabilities.

VDE-2026-085 — Weidmueller: SQL Injection Vulnerability in PROCON-WEB SCADA

2026-07-28T09:00:00+00:00

A remote unauthenticated attacker can exploit a SQL injection vulnerability in PROCON-WEB SCADA to execute arbitrary commands.

VDE-2026-081 — Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities

2026-07-28T09:00:00+00:00

Weidmueller security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities (CVE-2026-14167, CVE-2026-14168, CVE-2026-14169, CVE-2026-14171, CVE-2026-2291, CVE-2026-4893, CVE-2026-5172, CVE-2026-40510, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796) in firmware releases prior to V2.3.0 authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware V2.3.0.

VDE-2025-096 — Weidmueller: Multiple vulnerabilities in Energy Meter 750-24 and Energy Meter 750-230

2026-03-10T07:00:00+00:00

An unauthenticated remote attacker can exploit several vulnerabilities in Weidmueller devices Energy Meter 750-24 and Energy Meter 750-230 to ultimately gain full system access and remote code execution.

VDE-2025-044 — Weidmueller: Industrial ethernet switches are affected by multiple vulnerabilities

2025-08-27T10:00:00+00:00

Weidmueller industrial ethernet switches are affected by multiple vulnerabilities.

Weidmueller has released new firmwares of the affected products to fix the vulnerabilities.

VDE-2025-052 — Weidmueller: Security routers IE-SR-2TX are affected by multiple vulnerabilities

2025-07-23T10:00:00+00:00

Weidmueller security routers IE-SR-2TX are affected by multiple vulnerabilities (CVE-2025-41661, CVE-2025-41663, CVE-2025-41683, CVE-2025-41684, CVE-2025-41687).

Weidmueller has released new firmware versions of the affected products to fix the vulnerabilities.

**Update Version 1.1.0:** Added CVEs CVE-2025-41683, CVE-2025-41684 and CVE-2025-41687. Updated CVSS Score for CVE-2025-41663. Removed CVE-2025-41662.

VDE-2023-032 — Weidmueller: WIBU Vulnerability in multiple Products

2025-05-22T13:03:10+00:00

Multiple Weidmueller products are affected by recent WIBU vulnerability.

VDE-2019-018 — Weidmueller: multiple vulnerabilities in various Industrial Ethernet managed switches

2025-05-22T13:03:10+00:00

Multiple issues have been found. Please check the CVEs for details.

VDE-2025-041 — Weidmueller: ResMa is affected by a Vulnerability for ASP.NET AJAX

2025-05-19T09:00:00+00:00

Weidmueller product ResMa is affected by ASP.NET AJAX vulnerability.

Weidmueller has released a new firmware for the affected product to fix the vulnerability.

VDE-2025-021 — Weidmueller: Authentication Vulnerability in PROCON-WIN 5

2025-05-14T13:26:53+00:00

Weidmüller product PROCON-WIN is affected by hard-coded credentials.

Weidmüller has released a new version of the affected product to fix the vulnerability.