CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
36.9%
In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs account settings functionality. A specially crafted user name entry can cause the overwrite of an existing user account password, resulting in remote shell access to the device as that user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.
[
{
"product": "IE-WL(T)-BL-AP-CL-XX",
"vendor": "Weidmรผller",
"versions": [
{
"lessThanOrEqual": "V1.16.18 (Build 18081617)",
"status": "affected",
"version": "IE-WL-BL-AP-CL-EU (2536600000)",
"versionType": "custom"
},
{
"lessThanOrEqual": "V1.16.18 (Build 18081617)",
"status": "affected",
"version": "IE-WLT-BL-AP-CL-EU (2536650000)",
"versionType": "custom"
},
{
"lessThanOrEqual": "V1.16.18 (Build 18081617)",
"status": "affected",
"version": "IE-WL-BL-AP-CL-US (2536660000)",
"versionType": "custom"
},
{
"lessThanOrEqual": "V1.16.18 (Build 18081617)",
"status": "affected",
"version": "IE-WLT-BL-AP-CL-US (2536670000)",
"versionType": "custom"
}
]
},
{
"product": "IE-WL(T)-VL-AP-CL-XX",
"vendor": "Weidmรผller",
"versions": [
{
"lessThanOrEqual": "V1.11.10 (Build 18122616)",
"status": "affected",
"version": "IE-WL-VL-AP-BR-CL-EU (2536680000)",
"versionType": "custom"
},
{
"lessThanOrEqual": "V1.11.10 (Build 18122616)",
"status": "affected",
"version": "IE-WLT-VL-AP-BR-CL-EU (2536690000)",
"versionType": "custom"
},
{
"lessThanOrEqual": "V1.11.10 (Build 18122616)",
"status": "affected",
"version": "IE-WL-VL-AP-BR-CL-US (2536700000)",
"versionType": "custom"
},
{
"lessThanOrEqual": "V1.11.10 (Build 18122616)",
"status": "affected",
"version": "IE-WLT-VL-AP-BR-CL-US (2536710000)",
"versionType": "custom"
}
]
}
]
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
36.9%