Weidmueller Interface vulnerabilities
We track 3 vulnerabilities in Weidmueller Interface products across 4 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 25, 2026.
Latest Weidmueller Interface vulnerabilities
- 8.6 High severity
IE-SR-2TX-WL-4G-EU: Authentication Bypass Using an Alternate Path or Channel
The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS pas
- 9.8 Critical severity
IE-SR-2TX-WL: Improper Neutralization of Special Elements used in an OS Command
The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system(
- 9.8 Critical severity
PROCON-WEB SCADA: Improper Neutralization of Special Elements used in an SQL Command
In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows a remote unauthenticated attacker to execute arbitrary SQL commands.