TI-2026-45268 CVE-2026-63586 · GHSA-cf4x-hgj3-m8g7
Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface
Priority MEDIUM 50
The web-based management interface uses a modified uhttpd server with CGI shell scripts.
No Weidmueller Interface vulnerabilities are listed in CISA KEV.
3 records
The web-based management interface uses a modified uhttpd server with CGI shell scripts.
In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized.
The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting.