CVE-2021-33539highCWE-287

CVE-2021-33539: falha de alta gravidade em Weidmüller IE-WL(T)-BL-AP-CL-XX

WEIDMUELLER: WLAN devices affected by authentication bypass vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar IE-WL-BL-AP-CL-XX+ Monitorar IE-WL-VL-AP-CL-XX

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.2epss 1.1%
In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. A specially configured device hostname can cause the device to interpret selected remote traffic as local traffic, resulting in a bypass of web authentication. An attacker can send authenticated SNMP requests to trigger this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Weidmüller · IE-WL(T)-BL-AP-CL-XXWeidmüller · IE-WL(T)-VL-AP-CL-XX
CVEs relacionadas — Weidmüller IE-WL(T)-BL-AP-CL-XX

No mesmo produto, das mais perigosas para as menos.

CVE-2021-33534HIGHWEIDMUELLER: WLAN devices affected by OS Command Injection vulnerabilityEPSS 2.1%CVE-2021-33533HIGHWEIDMUELLER: WLAN devices affected by OS Command Injection vulnerabilityEPSS 1.7%CVE-2021-33532HIGHWEIDMUELLER: WLAN devices affected by OS Command Injection vulnerabilityEPSS 1.7%CVE-2021-33530HIGHWEIDMUELLER: WLAN devices affected by OS Command Injection vulnerabilityEPSS 1.7%CVE-2021-33537HIGHWEIDMUELLER: WLAN devices affected by Remote Code Execution (RCE) vulnerabilityEPSS 1.6%CVE-2021-33535HIGHWEIDMUELLER: WLAN devices affected by exploitable format string vulnerabilityEPSS 1.6%