Most recent entries from csaf_weidmuellerinterfacegmbhcokg

VDE-2019-018 — Weidmueller: multiple vulnerabilities in various Industrial Ethernet managed switches

2025-05-22T13:03:10+00:00

Multiple issues have been found. Please check the CVEs for details.

VDE-2020-041 — Weidmueller: u-create studio < 1.20.2 affected by WIBU-SYSTEMS CodeMeter vulnerabilities

2025-05-14T12:28:19+00:00

WIBU-SYSTEMS report multiple vulnerabilities in their CodeMeter Runtime software. As part of the Weidmüller u-create studio installation the WIBU-SYSTEMS CodeMeter is installed by default. As the u-create studio installation bundle contains vulnerable versions of WIBU-SYSTEMS CodeMeter, the u-create studio is affected by a subset of these vulnerabilities. For details refer to section "Impact".

VDE-2021-002 — Weidmueller: WI Manager affected by fdtContainer vulnerability

2025-05-14T12:28:19+00:00

A vulnerability has been discovered in the fdtCONTAINER component and application by M&M Software GmbH. As this software is part of the Weidmüller FDT/DTM Software with WI Manager, this Weidmueller software is affected by the above vulnerability as well.

The fdtCONTAINER component exchanges binary data blobs with the WI Manager. The WI Manager saves these binary data blobs into a project file.

If an attacker gets write access to the project file, the project file can be manipulated to contain malicious code.

VDE-2021-016 — Weidmueller: Accidentally open network port in u-controls and IoT-Gateways

2025-05-14T12:28:19+00:00

A network port intended only for device-internal usage is accidentally accessible via external network interfaces.

VDE-2021-026 — Weidmueller: Multiple vulnerabilities in Industrial WLAN devices

2025-05-14T13:00:15+00:00

Multiple issues in Weidmueller Industrial WLAN devices have been found.

Initial publication date: 2021-06-23 Update A publication date: 2021-07-02

Update A

CVE-2021-33534

CVSS: 7.2 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Description: An exploitable command injection vulnerability exists in the hostname functionality of Weidmueller Industrial WLAN devices. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device. An attacker can send various requests while authenticated as a high privilege user to trigger this vulnerability.

VDE-2021-042 — Weidmueller: Remote I/O fieldbus couplers (IP20) affected by INFRA:HALT vulnerabilities

2025-05-14T13:00:14+00:00

The Weidmueller Remote I/O (IP20) fieldbus couplers (u-remote) are affected by several vulnerabilities of the third-party TCP/IP Niche stack. An attacker may use crafted IP packets to cause a denial of service or breach of integrity of the affected products. Weidmueller recommends restricting network access from the internet and also locally to reduce the attack vector to a manageable minimum.

VDE-2022-008 — WEIDMUELLER: Multiple vulnerabilities in Modbus TCP/RTU Gateways

2022-04-07T06:00:00+00:00

Multiple issues have been found in the affected products. See CVE descriptions for details.

VDE-2021-004 — Weidmueller: EtherNet/IP Fieldbus Coupler out-of-bounds write

2022-06-21T08:00:00+00:00

A critical vulnerability has been discovered in the utilized component EtherNet/IP Adapter Development Kit (EADK) by Pyramid Solutions, Inc.. For details refer to CVE(s).This vulnerability may allow an attacker to send a specially crafted packet that may result in a denial-of-service condition of the affected products. The indicated firmware versions are only used on products of hardware version 01.xx.xx.

VDE-2022-056 — Weidmueller: Multiple IoT and control products affected by JavaScript injection vulnerability

2022-12-14T07:00:00+00:00

A JavaScript injection vulnerability has been discovered in the XML editing system SCHEMA ST4 onlinehelp by Quanos Solutions GmbH. For details refer to CVE.This vulnerability may allow an attacker to inject JavaScript code via URL to the affected products

VDE-2023-032 — Weidmueller: WIBU Vulnerability in multiple Products

2025-05-22T13:03:10+00:00

Multiple Weidmueller products are affected by recent WIBU vulnerability.