Weidmueller: Authentication Bypass Vulnerability in Industrial Ethernet Switches
The devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism. An unauthenticated remote attacker could exploit this weakness by performing brute-force attacks to guess valid credentials or by using MD5 collision techniques to forge authentication hashes, potentially compromising the device.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
IE-SW-VL05M-5TX
Vendor
Weidmueller
Product
IE-SW-VL05M-5TX
Platforms
Unknown
Default status
unaffected
IE-SW-VL05M-5TX · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
3.6.32
Unavailable
None listed
IE-SW-VL05MT-5TX
Vendor
Weidmueller
Product
IE-SW-VL05MT-5TX
Platforms
Unknown
Default status
unaffected
IE-SW-VL05MT-5TX · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
3.6.32
Unavailable
None listed
IE-SW-VL08MT-8TX
Vendor
Weidmueller
Product
IE-SW-VL08MT-8TX
Platforms
Unknown
Default status
unaffected
IE-SW-VL08MT-8TX · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
3.6.32
Unavailable
None listed
IE-SW-VL08MT-5TX-1SC-2SCS
Vendor
Weidmueller
Product
IE-SW-VL08MT-5TX-1SC-2SCS
Platforms
Unknown
Default status
unaffected
IE-SW-VL08MT-5TX-1SC-2SCS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
3.5.36
Unavailable
None listed
IE-SW-VL08MT-6TX-2SC
Vendor
Weidmueller
Product
IE-SW-VL08MT-6TX-2SC
Platforms
Unknown
Default status
unaffected
IE-SW-VL08MT-6TX-2SC · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
3.5.36
Unavailable
None listed
IE-SW-VL08MT-6TX-2ST
Vendor
Weidmueller
Product
IE-SW-VL08MT-6TX-2ST
Platforms
Unknown
Default status
unaffected
IE-SW-VL08MT-6TX-2ST · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
3.5.36
Unavailable
None listed
IE-SW-VL08MT-6TX-2SCS
Vendor
Weidmueller
Product
IE-SW-VL08MT-6TX-2SCS
Platforms
Unknown
Default status
unaffected
IE-SW-VL08MT-6TX-2SCS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
3.5.36
Unavailable
None listed
IE-SW-PL10M-3GT-7TX
Vendor
Weidmueller
Product
IE-SW-PL10M-3GT-7TX
Platforms
Unknown
Default status
unaffected
IE-SW-PL10M-3GT-7TX · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
3.3.34
Unavailable
None listed
IE-SW-PL10MT-3GT-7TX
Vendor
Weidmueller
Product
IE-SW-PL10MT-3GT-7TX
Platforms
Unknown
Default status
unaffected
IE-SW-PL10MT-3GT-7TX · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
3.3.34
Unavailable
None listed
IE-SW-PL16M-16TX
Vendor
Weidmueller
Product
IE-SW-PL16M-16TX
Platforms
Unknown
Default status
unaffected
IE-SW-PL16M-16TX · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
3.4.32
Unavailable
None listed
IE-SW-PL16MT-16TX
Vendor
Weidmueller
Product
IE-SW-PL16MT-16TX
Platforms
Unknown
Default status
unaffected
IE-SW-PL16MT-16TX · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
3.4.32
Unavailable
None listed
IE-SW-PL18M-2GC-16TX
Vendor
Weidmueller
Product
IE-SW-PL18M-2GC-16TX
Platforms
Unknown
Default status
unaffected
IE-SW-PL18M-2GC-16TX · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
3.4.40
Unavailable
None listed
IE-SW-PL18MT-2GC-16TX
Vendor
Weidmueller
Product
IE-SW-PL18MT-2GC-16TX
Platforms
Unknown
Default status
unaffected
IE-SW-PL18MT-2GC-16TX · Scoped product and version facts