Most recent entries from csaf_weidmuellerinterfacegmbhcokg

VDE-2026-083 — Weidmueller: Security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are affected by multiple vulnerabilities

Tue, 25 Aug 2026 09:00:00 +0000

Weidmueller security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are affected by an unauthenticated remote code execution vulnerability. IE-SR-2TX-WL-4G routers are also affected by a SMS password authorization bypass vulnerability.

Weidmueller has released new firmware versions of the affected products to fix the vulnerabilities.

VDE-2026-085 — Weidmueller: SQL Injection Vulnerability in PROCON-WEB SCADA

Tue, 28 Jul 2026 09:00:00 +0000

A remote unauthenticated attacker can exploit a SQL injection vulnerability in PROCON-WEB SCADA to execute arbitrary commands.

VDE-2026-081 — Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities

Tue, 28 Jul 2026 09:00:00 +0000

Weidmueller security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities (CVE-2026-14167, CVE-2026-14168, CVE-2026-14169, CVE-2026-14171, CVE-2026-2291, CVE-2026-4893, CVE-2026-5172, CVE-2026-40510, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796) in firmware releases prior to V2.3.0 authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware V2.3.0.

VDE-2025-096 — Weidmueller: Multiple vulnerabilities in Energy Meter 750-24 and Energy Meter 750-230

Tue, 10 Mar 2026 07:00:00 +0000

An unauthenticated remote attacker can exploit several vulnerabilities in Weidmueller devices Energy Meter 750-24 and Energy Meter 750-230 to ultimately gain full system access and remote code execution.

VDE-2025-044 — Weidmueller: Industrial ethernet switches are affected by multiple vulnerabilities

Tue, 27 May 2025 09:00:00 +0000

Weidmueller industrial ethernet switches are affected by multiple vulnerabilities.

Weidmueller has released new firmwares of the affected products to fix the vulnerabilities.

VDE-2025-052 — Weidmueller: Security routers IE-SR-2TX are affected by multiple vulnerabilities

Wed, 11 Jun 2025 10:00:00 +0000

Weidmueller security routers IE-SR-2TX are affected by multiple vulnerabilities (CVE-2025-41661, CVE-2025-41663, CVE-2025-41683, CVE-2025-41684, CVE-2025-41687).

Weidmueller has released new firmware versions of the affected products to fix the vulnerabilities.

**Update Version 1.1.0:** Added CVEs CVE-2025-41683, CVE-2025-41684 and CVE-2025-41687. Updated CVSS Score for CVE-2025-41663. Removed CVE-2025-41662.

VDE-2023-032 — Weidmueller: WIBU Vulnerability in multiple Products

Thu, 09 Nov 2023 07:42:00 +0000

Multiple Weidmueller products are affected by recent WIBU vulnerability.

VDE-2019-018 — Weidmueller: multiple vulnerabilities in various Industrial Ethernet managed switches

Thu, 05 Dec 2019 12:03:00 +0000

Multiple issues have been found. Please check the CVEs for details.

VDE-2025-041 — Weidmueller: ResMa is affected by a Vulnerability for ASP.NET AJAX

Mon, 19 May 2025 09:00:00 +0000

Weidmueller product ResMa is affected by ASP.NET AJAX vulnerability.

Weidmueller has released a new firmware for the affected product to fix the vulnerability.

VDE-2025-021 — Weidmueller: Authentication Vulnerability in PROCON-WIN 5

Wed, 05 Mar 2025 09:00:00 +0000

Weidmüller product PROCON-WIN is affected by hard-coded credentials.

Weidmüller has released a new version of the affected product to fix the vulnerability.