ICS-Advisories

Risk Evaluation

Weidmueller security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are affected by an unauthenticated remote code execution vulnerability. IE-SR-2TX-WL-4G routers are also affected by a SMS password authorization bypass vulnerability. Weidmueller has released new firmware versions of the affected products to fix the vulnerabilities.

Zusammenfassung der Gegenmaßnahmen

Restrict access to the web management interface using firewall rules, access control lists (ACLs), a VPN, or a trusted management network, and ensure the interface is not directly exposed to the public internet, until the firmware update is installed.

Risk Evaluation

Weidmueller security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities (CVE-2026-14167, CVE-2026-14168, CVE-2026-14169, CVE-2026-14171, CVE-2026-2291, CVE-2026-4893, CVE-2026-5172, CVE-2026-40510, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796) in firmware releases prior to V2.3.0 authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware V2.3.0.

Zusammenfassung der Gegenmaßnahmen

Restrict access to the configuration interface / web UI to trusted administrators and trusted networks, and do not grant the user/permission-management write permission to non-administrator roles.

Risk Evaluation

A remote unauthenticated attacker can exploit a SQL injection vulnerability in PROCON-WEB SCADA to execute arbitrary commands.

Zusammenfassung der Gegenmaßnahmen

Update PROCON-WEB SCADA to version 6.11.3.

Risk Evaluation

An unauthenticated remote attacker can exploit several vulnerabilities in Weidmueller devices Energy Meter 750-24 and Energy Meter 750-230 to ultimately gain full system access and remote code execution.

Zusammenfassung der Gegenmaßnahmen

Update to version 3.14

Risk Evaluation

Weidmueller industrial ethernet switches are affected by multiple vulnerabilities. Weidmueller has released new firmwares of the affected products to fix the vulnerabilities.

Zusammenfassung der Gegenmaßnahmen

Update to version V3.6.32

Risk Evaluation

Weidmueller security routers IE-SR-2TX are affected by multiple vulnerabilities (CVE-2025-41661, CVE-2025-41663, CVE-2025-41683, CVE-2025-41684, CVE-2025-41687). Weidmueller has released new firmware versions of the affected products to fix the vulnerabilities. **Update Version 1.1.0:** Added CVEs CVE-2025-41683, CVE-2025-41684 and CVE-2025-41687. Updated CVSS Score for CVE-2025-41663. Removed CVE-2025-41662.

Zusammenfassung der Gegenmaßnahmen

Update to version V1.49

Risk Evaluation

Multiple issues have been found. Please check the CVEs for details.

Zusammenfassung der Gegenmaßnahmen

For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

Risk Evaluation

Multiple Weidmueller products are affected by recent WIBU vulnerability.

Zusammenfassung der Gegenmaßnahmen

u-create studio: Disabling the network server function within CodeMeter would mitigate the vulnerability. To disable this function please refer to the following steps: 1. Navigate to the CodeMeter WebAdmin Website 2. Select option Settings > Server > Server access 3. Choose option 'deactivate' in section 'network server' 4. Click 'Apply' button on the bottom of the website

Risk Evaluation

Weidmueller product ResMa is affected by ASP.NET AJAX vulnerability. Weidmueller has released a new firmware for the affected product to fix the vulnerability.

Zusammenfassung der Gegenmaßnahmen

Update to version V3.7.4

Risk Evaluation

Weidmüller product PROCON-WIN is affected by hard-coded credentials. Weidmüller has released a new version of the affected product to fix the vulnerability.

Zusammenfassung der Gegenmaßnahmen

Update to 5.7.14.1

Risk Evaluation

Multiple issues in Weidmueller Industrial WLAN devices have been found. Initial publication date: 2021-06-23 Update A publication date: 2021-07-02 Update A CVE-2021-33534 CVSS: 7.2 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Description: An exploitable command injection vulnerability exists in the hostname functionality of Weidmueller Industrial WLAN devices. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device. An attacker can send various requests while authenticated as a high privilege user to trigger this vulnerability.

Zusammenfassung der Gegenmaßnahmen

For all potential vulnerabilities, customers can download a patched firmware to secure their Industrial WLAN devices properly. Please follow the procedure below to download and install the latest firmware for your device: 1. Use the link: [www.weidmueller.com](www.weidmueller.com) 2. Enter the product number of the Industrial WLAN device you want to update in the search field on the webpage and press "Enter". 3. On the next page, expand the drop-down menu **"Downloads"**. 4. Download the respective firmware from the download table. 5. Install the firmware on your device. Patched firmware versions for all affected products | Product number | Product name | Firmware version | |---------------|-----------------------------------|------------------------------------------| | 2536600000 | IE-WL-BL-AP-CL-EU | <= V1.16.21 (Build 21010513) | | 2536650000 | IE-WLT-BL-AP-CL-EU | <= V1.16.21 (Build 21010513) | | 2536660000 | IE-WL-BL-AP-CL-US | <= V1.16.21 (Build 21010513) | | 2536670000 | IE-WLT-BL-AP-CL-US | <= V1.16.21 (Build 21010513) | | 2536680000 | IE-WL-VL-AP-BR-CL-EU | <= V1.11.13 (Build 21010513) | | 2536690000 | IE-WLT-VL-AP-BR-CL-EU | <= V1.11.13 (Build 21010513) | | 2536700000 | IE-WL-VL-AP-BR-CL-US | <= V1.11.13 (Build 21010513) | | 2536710000 | IE-WLT-VL-AP-BR-CL-US | <= V1.11.13 (Build 21010513) | If a firmware update is available for your device, please follow the steps above to install it.

Risk Evaluation

The Weidmueller Remote I/O (IP20) fieldbus couplers (u-remote) are affected by several vulnerabilities of the third-party TCP/IP Niche stack. An attacker may use crafted IP packets to cause a denial of service or breach of integrity of the affected products. Weidmueller recommends restricting network access from the internet and also locally to reduce the attack vector to a manageable minimum.

Zusammenfassung der Gegenmaßnahmen

Fieldbuses (including Industrial Ethernet protocols) in general are not intended for direct connection with the internet, as they lack a proper set of security capabilities. This also applies to Weidmüller IP20 Remote I/O fieldbus couplers, which are developed and designed for operation in closed industrial networks. - Do not directly connect the affected products to the internet. - Restrict network access to the affected products by proper secured network infrastructure (e.g. routers, firewalls, DMZ, VPNs). - Restrict physical access to the industrial network and affected products (e.g cabinets, seals, closures).

Risk Evaluation

A vulnerability has been discovered in the fdtCONTAINER component and application by M&M Software GmbH. As this software is part of the Weidmüller FDT/DTM Software with WI Manager, this Weidmueller software is affected by the above vulnerability as well. The fdtCONTAINER component exchanges binary data blobs with the WI Manager. The WI Manager saves these binary data blobs into a project file. If an attacker gets write access to the project file, the project file can be manipulated to contain malicious code.

Zusammenfassung der Gegenmaßnahmen

- Exchange project data only via secure exchange services - Use appropriate means to protect the project storage from unauthorized manipulation - Do not open project data from an unknown source - Reduce the user rights of the WI Manager to the necessary minimum

Risk Evaluation

A network port intended only for device-internal usage is accidentally accessible via external network interfaces.

Zusammenfassung der Gegenmaßnahmen

Restrict access to the network th device is connected to Do not directly connect the device to the internet

Risk Evaluation

WIBU-SYSTEMS report multiple vulnerabilities in their CodeMeter Runtime software. As part of the Weidmüller u-create studio installation the WIBU-SYSTEMS CodeMeter is installed by default. As the u-create studio installation bundle contains vulnerable versions of WIBU-SYSTEMS CodeMeter, the u-create studio is affected by a subset of these vulnerabilities. For details refer to section "Impact".

Zusammenfassung der Gegenmaßnahmen

- Use the updated versions of the TRUMPF CAD/CAM products that will be available via your service channel shortly. - Until then, reduce internet usage on workstations with TRUMPF CAD/CAM products to a minimum.

Risk Evaluation

Multiple Weidmueller products are affected by an OpenSSL vulnerability. Weidmüller has released new firmwares of the affected products to fix the vulnerability.

Zusammenfassung der Gegenmaßnahmen

Update to version V3.6.30

Risk Evaluation

A JavaScript injection vulnerability has been discovered in the XML editing system SCHEMA ST4 onlinehelp by Quanos Solutions GmbH. For details refer to CVE.This vulnerability may allow an attacker to inject JavaScript code via URL to the affected products

Zusammenfassung der Gegenmaßnahmen

If the remediation cannot be implemented in a timely manner, Weidmueller strongly recommends that the authenticated user logged in to the product does not click on links from external sources.

Risk Evaluation

A critical vulnerability has been discovered in the utilized component EtherNet/IP Adapter Development Kit (EADK) by Pyramid Solutions, Inc.. For details refer to CVE(s).This vulnerability may allow an attacker to send a specially crafted packet that may result in a denial-of-service condition of the affected products. The indicated firmware versions are only used on products of hardware version 01.xx.xx.

Zusammenfassung der Gegenmaßnahmen

Weidmueller strongly recommends applying the following external protective measures: Restrict network access to the EtherNet/IP network containing affected products. If remote access is required, use secure methods such as virtual private networks (VPNs).

Risk Evaluation

Multiple issues have been found in the affected products. See CVE descriptions for details.

Zusammenfassung der Gegenmaßnahmen

For all potential vulnerabilities, customers can download a patched firmware to secure their Modbus TCP/RTU Gateways properly. Please download and install the latest firmware for your device by following the procedure below: 1. Go to [www.weidmueller.com](https://www.weidmueller.com) (external link). 2. Enter the product number of the Modbus TCP/RTU Gateway you want to update into the search field and press "Enter". 3. On the next page, expand the drop-down menu **"SHOW DOWNLOADS"**. 4. Download the respective firmware from the download table. 5. Install the firmware on your device. Find below the appropriate patched firmware versions for all affected products: | Product number | Product name | Patched firmware version | |----------------|-------------------------------|------------------------------| | 1504460000 | IE-GW-MB-2TX-1RS232/485 | V2.1 (Build 21072817) | | 1504470000 | IE-GWT-MB-2TX-1RS232/485 | V2.1 (Build 21072817) |