CVE-2025-3020

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2025
Source publication: May 6, 2025
Source updated: May 6, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Wiesemann & Theis: Multiple W&T Products are vulnerable to cross-site-scripting

An low privileged remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into several fields of the configuration webpage with limited impact.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

ERP-Gateway 12x Digital Input, 6x Digital Relais

Vendor: Wiesemann & Theis
Product: ERP-Gateway 12x Digital Input, 6x Digital Relais
Platforms: Unknown
Default status: unaffected

ERP-Gateway 12x Digital Input, 6x Digital Relais · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

ERP-Gateway 2x Digital Input, 2x Digital Output

Vendor: Wiesemann & Theis
Product: ERP-Gateway 2x Digital Input, 2x Digital Output
Platforms: Unknown
Default status: unaffected

ERP-Gateway 2x Digital Input, 2x Digital Output · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

ERP-Gateway 2x Digital PoE

Vendor: Wiesemann & Theis
Product: ERP-Gateway 2x Digital PoE
Platforms: Unknown
Default status: unaffected

ERP-Gateway 2x Digital PoE · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-Alarm 6x6 DigitalWeb-Alarm 6x6 Digital

Vendor: Wiesemann & Theis
Product: Web-Alarm 6x6 DigitalWeb-Alarm 6x6 Digital
Platforms: Unknown
Default status: unaffected

Web-Alarm 6x6 DigitalWeb-Alarm 6x6 Digital · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-Count 6x Digital

Vendor: Wiesemann & Theis
Product: Web-Count 6x Digital
Platforms: Unknown
Default status: unaffected

Web-Count 6x Digital · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	3.79	Unavailable	None listed

Web-Graph Air Quality

Vendor: Wiesemann & Theis
Product: Web-Graph Air Quality
Platforms: Unknown
Default status: unaffected

Web-Graph Air Quality · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-IO 12x Digital Input, 6x Digital Relais

Vendor: Wiesemann & Theis
Product: Web-IO 12x Digital Input, 6x Digital Relais
Platforms: Unknown
Default status: unaffected

Web-IO 12x Digital Input, 6x Digital Relais · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-IO 12x Digital Input, 6x Digital Relais

Vendor: Wiesemann & Theis
Product: Web-IO 12x Digital Input, 6x Digital Relais
Platforms: Unknown
Default status: unaffected

Web-IO 12x Digital Input, 6x Digital Relais · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-IO 12x Digital Input, 6x Digital Relais

Vendor: Wiesemann & Theis
Product: Web-IO 12x Digital Input, 6x Digital Relais
Platforms: Unknown
Default status: unaffected

Web-IO 12x Digital Input, 6x Digital Relais · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-IO Analog-In/Out 2x 0/4..20mA PoE

Vendor: Wiesemann & Theis
Product: Web-IO Analog-In/Out 2x 0/4..20mA PoE
Platforms: Unknown
Default status: unaffected

Web-IO Analog-In/Out 2x 0/4..20mA PoE · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-IO Digital 12xIn, 12xOut

Vendor: Wiesemann & Theis
Product: Web-IO Digital 12xIn, 12xOut
Platforms: Unknown
Default status: unaffected

Web-IO Digital 12xIn, 12xOut · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-IO Digital 12xIn, 12xOut

Vendor: Wiesemann & Theis
Product: Web-IO Digital 12xIn, 12xOut
Platforms: Unknown
Default status: unaffected

Web-IO Digital 12xIn, 12xOut · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-IO Digital 12xIn, 12xOut

Vendor: Wiesemann & Theis
Product: Web-IO Digital 12xIn, 12xOut
Platforms: Unknown
Default status: unaffected

Web-IO Digital 12xIn, 12xOut · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	4.08	Unavailable	None listed

Web-IO Digital 12xIn, 12xOut, 1xRS232

Vendor: Wiesemann & Theis
Product: Web-IO Digital 12xIn, 12xOut, 1xRS232
Platforms: Unknown
Default status: unaffected

Web-IO Digital 12xIn, 12xOut, 1xRS232 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-IO Digital 12xIn, 12xOut, 1xRS232

Vendor: Wiesemann & Theis
Product: Web-IO Digital 12xIn, 12xOut, 1xRS232
Platforms: Unknown
Default status: unaffected

Web-IO Digital 12xIn, 12xOut, 1xRS232 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-IO Digital 2xIn, 2xOut

Vendor: Wiesemann & Theis
Product: Web-IO Digital 2xIn, 2xOut
Platforms: Unknown
Default status: unaffected

Web-IO Digital 2xIn, 2xOut · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-IO Digital 2xIn, 2xOut

Vendor: Wiesemann & Theis
Product: Web-IO Digital 2xIn, 2xOut
Platforms: Unknown
Default status: unaffected

Web-IO Digital 2xIn, 2xOut · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-IO Digital 2xIn, 2xOut

Vendor: Wiesemann & Theis
Product: Web-IO Digital 2xIn, 2xOut
Platforms: Unknown
Default status: unaffected

Web-IO Digital 2xIn, 2xOut · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-IO Digital Logger 6xIn, 6xOut

Vendor: Wiesemann & Theis
Product: Web-IO Digital Logger 6xIn, 6xOut
Platforms: Unknown
Default status: unaffected

Web-IO Digital Logger 6xIn, 6xOut · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	3.70	Unavailable	None listed

Web-Thermograph 2x

Vendor: Wiesemann & Theis
Product: Web-Thermograph 2x
Platforms: Unknown
Default status: unaffected

Web-Thermograph 2x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-Thermograph 8x

Vendor: Wiesemann & Theis
Product: Web-Thermograph 8x
Platforms: Unknown
Default status: unaffected

Web-Thermograph 8x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-Thermograph NTC

Vendor: Wiesemann & Theis
Product: Web-Thermograph NTC
Platforms: Unknown
Default status: unaffected

Web-Thermograph NTC · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-Thermograph NTC PoE

Vendor: Wiesemann & Theis
Product: Web-Thermograph NTC PoE
Platforms: Unknown
Default status: unaffected

Web-Thermograph NTC PoE · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-Thermograph Pt100 / Pt1000

Vendor: Wiesemann & Theis
Product: Web-Thermograph Pt100 / Pt1000
Platforms: Unknown
Default status: unaffected

Web-Thermograph Pt100 / Pt1000 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-Thermograph Pt100 / Pt1000 PoE

Vendor: Wiesemann & Theis
Product: Web-Thermograph Pt100 / Pt1000 PoE
Platforms: Unknown
Default status: unaffected

Web-Thermograph Pt100 / Pt1000 PoE · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-Thermograph Relais

Vendor: Wiesemann & Theis
Product: Web-Thermograph Relais
Platforms: Unknown
Default status: unaffected

Web-Thermograph Relais · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-Thermo-Hygrobarograph

Vendor: Wiesemann & Theis
Product: Web-Thermo-Hygrobarograph
Platforms: Unknown
Default status: unaffected

Web-Thermo-Hygrobarograph · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed

Web-Thermo-Hygrograph

Vendor: Wiesemann & Theis
Product: Web-Thermo-Hygrograph
Platforms: Unknown
Default status: unaffected

Web-Thermo-Hygrograph · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
all	`affected`	Unavailable	Unavailable	Unavailable	None listed