CVE-2019-16670

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. The Authentication mechanism has no brute-force prevention...

CVE-2019-16670

CVE-2019-16670 affects Weidmueller industrial Ethernet switches (IE-SW-VL05M/VL08MT and related PL series). The root cause is lack of brute-force protection in the authentication mechanism, enabling remote attackers to repeatedly guess credentials. CVSS v3 base score is 9.8 (Critical) with networ...

Weidmueller Industrial Ethernet Switches

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Weidmueller Equipment: Industrial Ethernet Switches Vulnerabilities: Improper Restriction of Excessive Authentication Attempts, Uncontrolled Resource Consumption, Missing Encryption of Sensitive...