IE-SR-2TX-WL-4G-EU vulnerabilities
2 known vulnerabilities in IE-SR-2TX-WL-4G-EU from Weidmueller Interface. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
1critical
1high
0exploited
9.2average CVSS score
Latest first
- 8.6 High severity
IE-SR-2TX-WL-4G-EU: Authentication Bypass Using an Alternate Path or Channel
The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS pas
- 9.8 Critical severity
IE-SR-2TX-WL: Improper Neutralization of Special Elements used in an OS Command
The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system(