CVE-2025-41652: critical vulnerability in Weidmueller IE-SW-PL10M-3GT-7TX
Weidmueller: Authentication Bypass Vulnerability in Industrial Ethernet Switches
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Weidmueller industrial switches can be accessed without proper authentication due to weak security checks. An attacker can guess passwords or forge fake login credentials to gain full control of critical network equipment.
The authorization mechanism in Weidmueller switches contains flaws allowing unauthenticated remote attackers to bypass authentication via brute-force credential guessing or MD5 hash collision techniques. Successful exploitation grants unauthorized access to device management and control, compromising integrity and availability of industrial network infrastructure.
In the same product, most dangerous first.