Weidmueller: Authentication Bypass Vulnerability in Industrial Ethernet Switches

Weidmueller industrial switches can be accessed without proper authentication due to weak security checks. An attacker can guess passwords or forge fake login credentials to gain full control of critical network equipment.

The authorization mechanism in Weidmueller switches contains flaws allowing unauthenticated remote attackers to bypass authentication via brute-force credential guessing or MD5 hash collision techniques. Successful exploitation grants unauthorized access to device management and control, compromising integrity and availability of industrial network infrastructure.