critical
9
CWE
269
Advisory Published
Updated

CVE-2021-33538: WEIDMUELLER: WLAN devices affected by improper access control vulnerability

First published: Fri Jun 25 2021(Updated: )

In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs account settings functionality. A specially crafted user name entry can cause the overwrite of an existing user account password, resulting in remote shell access to the device as that user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.

Credit: info@cert.vde.com

Affected SoftwareAffected VersionHow to fix
Weidmueller Ie-wl-bl-ap-cl-eu Firmware<=1.16.18
Weidmueller Ie-wl-bl-ap-cl-eu
Weidmueller Ie-wlt-bl-ap-cl-eu Firmware<=1.16.18
Weidmueller Ie-wlt-bl-ap-cl-eu
Weidmueller Ie-wl-bl-ap-cl-us Firmware<=1.16.18
Weidmueller Ie-wl-bl-ap-cl-us
Weidmueller Ie-wlt-bl-ap-cl-us Firmware<=1.16.18
Weidmueller Ie-wlt-bl-ap-cl-us
Weidmueller Ie-wl-vl-ap-br-cl-eu Firmware<=1.16.18
Weidmueller Ie-wl-vl-ap-br-cl-eu
Weidmueller Ie-wlt-vl-ap-br-cl-eu Firmware<=1.16.18
Weidmueller Ie-wlt-vl-ap-br-cl-eu
Weidmueller Ie-wl-vl-ap-br-cl-us Firmware<=1.16.18
Weidmueller Ie-wl-vl-ap-br-cl-us
Weidmueller Ie-wlt-vl-ap-br-cl-us Firmware<=1.16.18
Weidmueller Ie-wlt-vl-ap-br-cl-us
Weidmueller Ie-wl-bl-ap-cl-eu Firmware<=1.11.10
Weidmueller Ie-wlt-bl-ap-cl-eu Firmware<=1.11.10
Weidmueller Ie-wl-bl-ap-cl-us Firmware<=1.11.10
Weidmueller Ie-wlt-bl-ap-cl-us Firmware<=1.11.10
Weidmueller Ie-wl-vl-ap-br-cl-eu Firmware<=1.11.10
Weidmueller Ie-wlt-vl-ap-br-cl-eu Firmware<=1.11.10
Weidmueller Ie-wl-vl-ap-br-cl-us Firmware<=1.11.10
Weidmueller Ie-wlt-vl-ap-br-cl-us Firmware<=1.11.10

Remedy

For IE-WL(T)-BL-AP-CL-XX versions V1.16.21 (Build 21010513) and greater are fixed. For IE-WL(T)-VL-AP-CL-XX versions V1.11.13 (Build 21010513) and greater are fixed.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is CVE-2021-33538?

    CVE-2021-33538 is a vulnerability in Weidmueller Industrial WLAN devices that allows improper access control, resulting in remote shell access.

  • How severe is CVE-2021-33538?

    CVE-2021-33538 has a severity score of 8.8, which is categorized as critical.

  • Which Weidmueller Industrial WLAN devices are affected by CVE-2021-33538?

    Multiple versions of Weidmueller Industrial WLAN devices including Weidmueller Ie-wl-bl-ap-cl-eu, Weidmueller Ie-wlt-bl-ap-cl-eu, Weidmueller Ie-wl-bl-ap-cl-us, Weidmueller Ie-wlt-bl-ap-cl-us, Weidmueller Ie-wl-vl-ap-br-cl-eu, Weidmueller Ie-wlt-vl-ap-br-cl-eu, Weidmueller Ie-wl-vl-ap-br-cl-us, and Weidmueller Ie-wlt-vl-ap-br-cl-us are affected.

  • What is the vulnerability in Weidmueller Industrial WLAN devices?

    The vulnerability in Weidmueller Industrial WLAN devices is an improper access control vulnerability in the iw_webs account settings functionality.

  • How can I fix the vulnerability in Weidmueller Industrial WLAN devices?

    To fix the vulnerability in Weidmueller Industrial WLAN devices, it is recommended to update to a version that includes a fix for CVE-2021-33538.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203