CVE-2025-41653 Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet Switches

An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicious header, potentially causing the server to crash or become unresponsive...

CVE-2025-41652 Weidmueller: Authentication Bypass Vulnerability in Industrial Ethernet Switches

The devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism. An unauthenticated remote attacker could exploit this weakness by performing brute-force attacks to guess valid credentials or by using MD5 collision techniques to forge authentication hashes,...

CVE-2025-41652 Weidmueller: Authentication Bypass Vulnerability in Industrial Ethernet Switches

The devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism. An unauthenticated remote attacker could exploit this weakness by performing brute-force attacks to guess valid credentials or by using MD5 collision techniques to forge authentication hashes,...

CVE-2025-41651

CVE-2025-41651 concerns a missing authentication flaw in Weidmueller industrial Ethernet switches (e.g., E-SW-VL08MT-8TX, IE-SW-PL10M-3GT-7TX, IE-SW-PL16M-16TX, IE-SW-PL18M-2GC-16TX). The root cause is lack of authentication for a critical function, enabling an unauthenticated remote attacker to ...

CVE-2025-41650 Weidmueller: Denial-of-Service Vulnerability in Industrial Ethernet Switches

An unauthenticated remote attacker can exploit input validation in cmd services of the devices, allowing them to disrupt system operations and potentially cause a denial-of-service...

CVE-2025-41650 Weidmueller: Denial-of-Service Vulnerability in Industrial Ethernet Switches

An unauthenticated remote attacker can exploit input validation in cmd services of the devices, allowing them to disrupt system operations and potentially cause a denial-of-service...

CVE-2025-41650

CVE-2025-41650 affects Weidmueller Interface industrial Ethernet switches. Multiple product lines are affected by insufficient input validation in cmd service handling, enabling an unauthenticated remote attacker to disrupt operations and cause a denial-of-service. Affected products and minimum f...

CVE-2025-41649 Weidmueller: Out-of-Bounds Write Vulnerability in Industrial Ethernet Switches

An unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer, potentially leading to a denial-of-service condition for the devices...

CVE-2025-41649

CVE-2025-41649 describes an out-of-bounds write vulnerability caused by insufficient input validation in certain Weidmueller industrial Ethernet switches (e.g., IE-SW-PL10M-3GT-7TX family). An unauthenticated remote attacker can trigger data writes beyond buffer bounds, potentially leading to a d...

CVE-2025-41649 Weidmueller: Out-of-Bounds Write Vulnerability in Industrial Ethernet Switches

An unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer, potentially leading to a denial-of-service condition for the devices...

Weidmueller Interface多款产品 安全漏洞

Weidmueller Interface E-SW-VL08MT-8TX and others are products of Weidmueller Interface, Germany.Weidmueller Interface E-SW-VL08MT-8TX is a managed network switch.Weidmueller Interface IE-SW-PL10M-3GT-7TX is an Ethernet switch.Weidmueller Interface IE-SW-PL10MT-3GT-7TX is a managed network switch....

Weidmueller Interface多款产品 安全漏洞

Weidmueller Interface E-SW-VL08MT-8TX and others are products of Weidmueller Interface, Germany.Weidmueller Interface E-SW-VL08MT-8TX is a managed network switch.Weidmueller Interface IE-SW-PL10M-3GT-7TX is an Ethernet switch.Weidmueller Interface IE-SW-PL10MT-3GT-7TX is a managed network switch....

CVE-2024-20465

A vulnerability in the access control list ACL programming of Cisco IOS Software running on Cisco Industrial Ethernet 4000, 4010, and 5000 Series Switches could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to the incorrect handling of IPv4 ACLs o...

CVE-2024-20263

A vulnerability with the access control list ACL management within a stacked switch configuration of Cisco Business 250 Series Smart Switches and Business 350 Series Managed Switches could allow an unauthenticated, remote attacker to bypass protection offered by a configured ACL on an affected...

CVE-2024-22054

A malformed discovery packet sent by a malicious actor with preexisting access to the network could interrupt the functionality of device management and discovery. Affected Products: UniFi Access Points UniFi Switches UniFi LTE Backup UniFi Express Only Mesh Mode, Router mode is not affected...

CVE-2023-28768

Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80ABXN.1, XMG1930-30 firmware version V4.80ACAR.1, and XS1930-10 firmware version V4.80ABQE.1 could allow an unauthenticated LAN-based attacker to cause denial-of-service DoS conditions by sending crafted frames to an affected...

CVE-2023-20033

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 3650 and Catalyst 3850 Series Switches could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due to improper resource...

CVE-2023-35085

An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled could allow a Remote Code Execution RCE. Affected Products: All UniFi Access Points Version 6.5.50 and earlier All UniFi Switches Version...

The vulnerability of SCALANCE W-700 IEEE 802.11ax industrial switches, related to insufficient verification of input data, allows a intruder to execute arbitrary commands.

The vulnerability of SCALANCE W-700 IEEE 802.11ax industrial switches lies in insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2021-41314

Certain NETGEAR smart switches are affected by a \n injection in the web UI's password field, which - due to several faulty aspects of the authentication scheme - allows the attacker to create or overwrite a file with specific content e.g., the "2" string. This leads to admin session crafting and...