CVE-2021-33537: WEIDMUELLER: WLAN devices affected by Remote Code Execution (RCE) vulnerability
First published: Fri Jun 25 2021(Updated: )
In Weidmueller Industrial WLAN devices in multiple versions an exploitable remote code execution vulnerability exists in the iw_webs configuration parsing functionality. A specially crafted user name entry can cause an overflow of an error message buffer, resulting in remote code execution. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.
Credit: info@cert.vde.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Weidmueller Ie-wl-bl-ap-cl-eu Firmware | <=1.16.18 | |
| Weidmueller Ie-wl-bl-ap-cl-eu | ||
| Weidmueller Ie-wlt-bl-ap-cl-eu Firmware | <=1.16.18 | |
| Weidmueller Ie-wlt-bl-ap-cl-eu | ||
| Weidmueller Ie-wl-bl-ap-cl-us Firmware | <=1.16.18 | |
| Weidmueller Ie-wl-bl-ap-cl-us | ||
| Weidmueller Ie-wlt-bl-ap-cl-us Firmware | <=1.16.18 | |
| Weidmueller Ie-wlt-bl-ap-cl-us | ||
| Weidmueller Ie-wl-vl-ap-br-cl-eu Firmware | <=1.16.18 | |
| Weidmueller Ie-wl-vl-ap-br-cl-eu | ||
| Weidmueller Ie-wlt-vl-ap-br-cl-eu Firmware | <=1.16.18 | |
| Weidmueller Ie-wlt-vl-ap-br-cl-eu | ||
| Weidmueller Ie-wl-vl-ap-br-cl-us Firmware | <=1.16.18 | |
| Weidmueller Ie-wl-vl-ap-br-cl-us | ||
| Weidmueller Ie-wlt-vl-ap-br-cl-us Firmware | <=1.16.18 | |
| Weidmueller Ie-wlt-vl-ap-br-cl-us | ||
| Weidmueller Ie-wl-bl-ap-cl-eu Firmware | <=1.11.10 | |
| Weidmueller Ie-wlt-bl-ap-cl-eu Firmware | <=1.11.10 | |
| Weidmueller Ie-wl-bl-ap-cl-us Firmware | <=1.11.10 | |
| Weidmueller Ie-wlt-bl-ap-cl-us Firmware | <=1.11.10 | |
| Weidmueller Ie-wl-vl-ap-br-cl-eu Firmware | <=1.11.10 | |
| Weidmueller Ie-wlt-vl-ap-br-cl-eu Firmware | <=1.11.10 | |
| Weidmueller Ie-wl-vl-ap-br-cl-us Firmware | <=1.11.10 | |
| Weidmueller Ie-wlt-vl-ap-br-cl-us Firmware | <=1.11.10 |
Remedy
For IE-WL(T)-BL-AP-CL-XX versions V1.16.21 (Build 21010513) and greater are fixed. For IE-WL(T)-VL-AP-CL-XX versions V1.11.13 (Build 21010513) and greater are fixed.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-33537 vulnerability?
CVE-2021-33537 is a remote code execution vulnerability in Weidmueller Industrial WLAN devices in multiple versions.
How severe is CVE-2021-33537 vulnerability?
CVE-2021-33537 vulnerability has a severity score of 8.8 (high).
How does CVE-2021-33537 vulnerability occur?
CVE-2021-33537 vulnerability occurs due to an overflow of an error message buffer when parsing the iw_webs configuration in Weidmueller Industrial WLAN devices.
Which versions of Weidmueller Industrial WLAN devices are affected by CVE-2021-33537 vulnerability?
CVE-2021-33537 vulnerability affects the following versions of Weidmueller Industrial WLAN devices: Ie-wl-bl-ap-cl-eu Firmware up to and including 1.16.18, Ie-wlt-bl-ap-cl-eu Firmware up to and including 1.16.18, Ie-wl-bl-ap-cl-us Firmware up to and including 1.16.18, Ie-wlt-bl-ap-cl-us Firmware up to and including 1.16.18, Ie-wl-vl-ap-br-cl-eu Firmware up to and including 1.16.18, Ie-wlt-vl-ap-br-cl-eu Firmware up to and including 1.16.18, Ie-wl-vl-ap-br-cl-us Firmware up to and including 1.16.18, Ie-wlt-vl-ap-br-cl-us Firmware up to and including 1.16.18, Ie-wl-bl-ap-cl-eu Firmware up to and including 1.11.10, Ie-wlt-bl-ap-cl-eu Firmware up to and including 1.11.10, Ie-wl-bl-ap-cl-us Firmware up to and including 1.11.10, Ie-wlt-bl-ap-cl-us Firmware up to and including 1.11.10, Ie-wl-vl-ap-br-cl-eu Firmware up to and including 1.11.10, and Ie-wlt-vl-ap-br-cl-eu Firmware up to and including 1.11.10.
How can I fix the CVE-2021-33537 vulnerability?
To fix the CVE-2021-33537 vulnerability, it is recommended to update your Weidmueller Industrial WLAN devices to a version higher than 1.16.18 or 1.11.10, depending on the affected firmware.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/references
- agent/title
- agent/severity
- agent/remedy
- agent/last-modified-date
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/weidmueller
- canonical/weidmueller ie-wl-bl-ap-cl-eu firmware
- version/weidmueller ie-wl-bl-ap-cl-eu firmware/1.16.18
- canonical/weidmueller ie-wl-bl-ap-cl-eu
- canonical/weidmueller ie-wlt-bl-ap-cl-eu firmware
- version/weidmueller ie-wlt-bl-ap-cl-eu firmware/1.16.18
- canonical/weidmueller ie-wlt-bl-ap-cl-eu
- canonical/weidmueller ie-wl-bl-ap-cl-us firmware
- version/weidmueller ie-wl-bl-ap-cl-us firmware/1.16.18
- canonical/weidmueller ie-wl-bl-ap-cl-us
- canonical/weidmueller ie-wlt-bl-ap-cl-us firmware
- version/weidmueller ie-wlt-bl-ap-cl-us firmware/1.16.18
- canonical/weidmueller ie-wlt-bl-ap-cl-us
- canonical/weidmueller ie-wl-vl-ap-br-cl-eu firmware
- version/weidmueller ie-wl-vl-ap-br-cl-eu firmware/1.16.18
- canonical/weidmueller ie-wl-vl-ap-br-cl-eu
- canonical/weidmueller ie-wlt-vl-ap-br-cl-eu firmware
- version/weidmueller ie-wlt-vl-ap-br-cl-eu firmware/1.16.18
- canonical/weidmueller ie-wlt-vl-ap-br-cl-eu
- canonical/weidmueller ie-wl-vl-ap-br-cl-us firmware
- version/weidmueller ie-wl-vl-ap-br-cl-us firmware/1.16.18
- canonical/weidmueller ie-wl-vl-ap-br-cl-us
- canonical/weidmueller ie-wlt-vl-ap-br-cl-us firmware
- version/weidmueller ie-wlt-vl-ap-br-cl-us firmware/1.16.18
- canonical/weidmueller ie-wlt-vl-ap-br-cl-us
- version/weidmueller ie-wl-bl-ap-cl-eu firmware/1.11.10
- version/weidmueller ie-wlt-bl-ap-cl-eu firmware/1.11.10
- version/weidmueller ie-wl-bl-ap-cl-us firmware/1.11.10
- version/weidmueller ie-wlt-bl-ap-cl-us firmware/1.11.10
- version/weidmueller ie-wl-vl-ap-br-cl-eu firmware/1.11.10
- version/weidmueller ie-wlt-vl-ap-br-cl-eu firmware/1.11.10
- version/weidmueller ie-wl-vl-ap-br-cl-us firmware/1.11.10
- version/weidmueller ie-wlt-vl-ap-br-cl-us firmware/1.11.10