HIGH🇵🇱 Wersja polska

CVE-2021-33528

CVSS 8.8v3.1pub. 2021-06-25upd. 2024-11-21

In Weidmueller Industrial WLAN devices in multiple versions an exploitable privilege escalation vulnerability exists in the iw_console functionality. A specially crafted menu selection string can cause an escape from the restricted console, resulting in system access as the root user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Weidmueller Ie Wl Bl Ap Cl Eu

    HW
    Weidmueller
    all versions

  • Weidmueller Ie Wl Bl Ap Cl Eu Firmware

    OS
    Weidmueller
    ≤ 1.11.10≤ 1.16.18

  • Weidmueller Ie Wl Bl Ap Cl Us

    HW
    Weidmueller
    all versions

  • Weidmueller Ie Wl Bl Ap Cl Us Firmware

    OS
    Weidmueller
    ≤ 1.11.10≤ 1.16.18

  • Weidmueller Ie Wlt Bl Ap Cl Eu

    HW
    Weidmueller
    all versions

  • Weidmueller Ie Wlt Bl Ap Cl Eu Firmware

    OS
    Weidmueller
    ≤ 1.16.18≤ 1.11.10

  • Weidmueller Ie Wlt Bl Ap Cl Us

    HW
    Weidmueller
    all versions

  • Weidmueller Ie Wlt Bl Ap Cl Us Firmware

    OS
    Weidmueller
    ≤ 1.11.10≤ 1.16.18

  • Weidmueller Ie Wlt Vl Ap Br Cl Eu

    HW
    Weidmueller
    all versions

  • Weidmueller Ie Wlt Vl Ap Br Cl Eu Firmware

    OS
    Weidmueller
    ≤ 1.11.10≤ 1.16.18

  • Weidmueller Ie Wlt Vl Ap Br Cl Us

    HW
    Weidmueller
    all versions

  • Weidmueller Ie Wlt Vl Ap Br Cl Us Firmware

    OS
    Weidmueller
    ≤ 1.11.10≤ 1.16.18

  • Weidmueller Ie Wl Vl Ap Br Cl Eu

    HW
    Weidmueller
    all versions

  • Weidmueller Ie Wl Vl Ap Br Cl Eu Firmware

    OS
    Weidmueller
    ≤ 1.11.10≤ 1.16.18

  • Weidmueller Ie Wl Vl Ap Br Cl Us

    HW
    Weidmueller
    all versions

  • Weidmueller Ie Wl Vl Ap Br Cl Us Firmware

    OS
    Weidmueller
    ≤ 1.16.18≤ 1.11.10
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
LPE
CWE
References

Related vulnerabilities

CVE-2021-33530HIGH8.8same product

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exi...

CVE-2021-33531HIGH8.8same product

In Weidmueller Industrial WLAN devices in multiple versions an exploitable use of hard-coded credentials vulne...

CVE-2021-33532HIGH8.8same product

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exi...

CVE-2021-33533HIGH8.8same product

In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exi...

CVE-2021-33529HIGH7.5same product

In Weidmueller Industrial WLAN devices in multiple versions the usage of hard-coded cryptographic keys within ...