IE-SW-PL10M-3GT-7TX vulnerabilities
5 known vulnerabilities in IE-SW-PL10M-3GT-7TX from Weidmueller. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
IE-SW-VL05M-5TX: Insufficient Resource Pool
An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicious header, potentially causing the server to crash or become unresponsive.
- 9.8 Critical severity
IE-SW-VL05M-5TX: Use of Weak Hash
The devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism. An unauthenticated remote attacker could exploit this weakness by performing brute-force attacks to guess valid credentials or by using MD5 collision techniques
- 9.8 Critical severity
IE-SW-VL05M-5TX: Missing Authentication for Critical Functionality
Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise.
- 7.5 High severity
IE-SW-VL05M-5TX: Improper Validation of Specified Type of Input
An unauthenticated remote attacker can exploit input validation in cmd services of the devices, allowing them to disrupt system operations and potentially cause a denial-of-service.
- 7.5 High severity
IE-SW-VL05M-5TX: Out-of-bounds Write
An unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer, potentially leading to a denial-of-service condition for the devices.