WEIDMUELLER: WLAN devices affected by Remote Code Execution (RCE) vulnerability
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In Weidmueller Industrial WLAN devices in multiple versions an exploitable remote code execution vulnerability exists in the iw_webs configuration parsing functionality. A specially crafted user name entry can cause an overflow of an error message buffer, resulting in remote code execution. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.
Timeline
- CVE published
- Record last updated
Affected versions
- Weidmüller IE-WL(T)-BL-AP-CL-XX
From IE-WL-BL-AP-CL-EU (2536600000) · through V1.16.18 (Build 18081617); From IE-WLT-BL-AP-CL-EU (2536650000) · through V1.16.18 (Build 18081617); From IE-WL-BL-AP-CL-US (2536660000) · through V1.16.18 (Build 18081617); From IE-WLT-BL-AP-CL-US (2536670000) · through V1.16.18 (Build 18081617)
- Weidmüller IE-WL(T)-VL-AP-CL-XX
From IE-WL-VL-AP-BR-CL-EU (2536680000) · through V1.11.10 (Build 18122616); From IE-WLT-VL-AP-BR-CL-EU (2536690000) · through V1.11.10 (Build 18122616); From IE-WL-VL-AP-BR-CL-US (2536700000) · through V1.11.10 (Build 18122616); From IE-WLT-VL-AP-BR-CL-US (2536710000) · through V1.11.10 (Build 18122616)