Read the docs
TI-2021-04105 Aliases CVE-2021-20999GHSA-3qph-f3mq-792v

WEIDMUELLER: Accidentally open network port in u-controls and IoT-Gateways

Priority MEDIUM 44CWE-668Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting this vulnerability the device may be manipulated or the operation may be stopped.

Why it matters now

EPSS 0.00947 61st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
WeidmuellerUC20-WL2000-AC (No. 1334950000)1.3.0 – 1.9.0; 1.10.0 – 1.10.2; 1.11.0 – 1.12.1—No fix listedCNA
WeidmuellerUC20-WL2000-IOT (No. 1334990000)1.3.0 – 1.9.0; 1.10.0 – 1.10.2; 1.11.0 – 1.12.1—No fix listedCNA
WeidmuellerIOT-GW30 (No. 2682620000)1.3.0 – 1.9.0; 1.10.0 – 1.10.2; 1.11.0 – 1.12.1—No fix listedCNA
WeidmuellerIOT-GW30-4G-EU (No. 2682630000)1.3.0 – 1.9.0; 1.10.0 – 1.10.2; 1.11.0 – 1.12.1—No fix listedCNA
  • UC20-WL2000-AC (No. 1334950000) VendorWeidmueller Affected 1.3.0 – 1.9.0; 1.10.0 – 1.10.2; 1.11.0 – 1.12.1 Fixed in — No fix listed CNA
  • UC20-WL2000-IOT (No. 1334990000) VendorWeidmueller Affected 1.3.0 – 1.9.0; 1.10.0 – 1.10.2; 1.11.0 – 1.12.1 Fixed in — No fix listed CNA
  • IOT-GW30 (No. 2682620000) VendorWeidmueller Affected 1.3.0 – 1.9.0; 1.10.0 – 1.10.2; 1.11.0 – 1.12.1 Fixed in — No fix listed CNA
  • IOT-GW30-4G-EU (No. 2682630000) VendorWeidmueller Affected 1.3.0 – 1.9.0; 1.10.0 – 1.10.2; 1.11.0 – 1.12.1 Fixed in — No fix listed CNA

CPE configurations NVD · 16

CPEVersionsRoleVendor
cpe:2.3:o:weidmueller:uc20-wl2000-ac_firmware:*:*:*:*:*:*:*:*1.3.0 to before 1.9.1; 1.10.0 to before 1.10.3VulnerableWeidmueller
cpe:2.3:o:weidmueller:uc20-wl2000-ac_firmware:1.11.0:*:*:*:*:*:*:*1.11.0VulnerableWeidmueller
cpe:2.3:o:weidmueller:uc20-wl2000-ac_firmware:1.12.1:*:*:*:*:*:*:*1.12.1VulnerableWeidmueller
cpe:2.3:h:weidmueller:uc20-wl2000-ac:-:*:*:*:*:*:*:*not specified by NVDRunning onWeidmueller
cpe:2.3:o:weidmueller:uc20-wl2000-iot_firmware:*:*:*:*:*:*:*:*1.3.0 to before 1.9.1; 1.10.0 to before 1.10.3VulnerableWeidmueller
cpe:2.3:o:weidmueller:uc20-wl2000-iot_firmware:1.11.0:*:*:*:*:*:*:*1.11.0VulnerableWeidmueller
cpe:2.3:o:weidmueller:uc20-wl2000-iot_firmware:1.12.1:*:*:*:*:*:*:*1.12.1VulnerableWeidmueller
cpe:2.3:h:weidmueller:uc20-wl2000-iot:-:*:*:*:*:*:*:*not specified by NVDRunning onWeidmueller
cpe:2.3:o:weidmueller:iot-gw30_firmware:*:*:*:*:*:*:*:*1.3.0 to before 1.9.1; 1.10.0 to before 1.10.3VulnerableWeidmueller
cpe:2.3:o:weidmueller:iot-gw30_firmware:1.11.0:*:*:*:*:*:*:*1.11.0VulnerableWeidmueller
  • cpe:2.3:o:weidmueller:uc20-wl2000-ac_firmware:*:*:*:*:*:*:*:* Versions 1.3.0 to before 1.9.1; 1.10.0 to before 1.10.3 Vulnerable ·Weidmueller
  • cpe:2.3:o:weidmueller:uc20-wl2000-ac_firmware:1.11.0:*:*:*:*:*:*:* Versions 1.11.0 Vulnerable ·Weidmueller
  • cpe:2.3:o:weidmueller:uc20-wl2000-ac_firmware:1.12.1:*:*:*:*:*:*:* Versions 1.12.1 Vulnerable ·Weidmueller
  • cpe:2.3:h:weidmueller:uc20-wl2000-ac:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Weidmueller
  • cpe:2.3:o:weidmueller:uc20-wl2000-iot_firmware:*:*:*:*:*:*:*:* Versions 1.3.0 to before 1.9.1; 1.10.0 to before 1.10.3 Vulnerable ·Weidmueller
  • cpe:2.3:o:weidmueller:uc20-wl2000-iot_firmware:1.11.0:*:*:*:*:*:*:* Versions 1.11.0 Vulnerable ·Weidmueller
  • cpe:2.3:o:weidmueller:uc20-wl2000-iot_firmware:1.12.1:*:*:*:*:*:*:* Versions 1.12.1 Vulnerable ·Weidmueller
  • cpe:2.3:h:weidmueller:uc20-wl2000-iot:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Weidmueller
  • cpe:2.3:o:weidmueller:iot-gw30_firmware:*:*:*:*:*:*:*:* Versions 1.3.0 to before 1.9.1; 1.10.0 to before 1.10.3 Vulnerable ·Weidmueller
  • cpe:2.3:o:weidmueller:iot-gw30_firmware:1.11.0:*:*:*:*:*:*:* Versions 1.11.0 Vulnerable ·Weidmueller
Show 6 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:weidmueller:iot-gw30_firmware:1.12.1:*:*:*:*:*:*:*1.12.1VulnerableWeidmueller
cpe:2.3:h:weidmueller:iot-gw30:-:*:*:*:*:*:*:*not specified by NVDRunning onWeidmueller
cpe:2.3:o:weidmueller:iot-gw30-4g-eu_firmware:*:*:*:*:*:*:*:*1.3.0 to before 1.9.1; 1.10.0 to before 1.10.3VulnerableWeidmueller
cpe:2.3:o:weidmueller:iot-gw30-4g-eu_firmware:1.11.0:*:*:*:*:*:*:*1.11.0VulnerableWeidmueller
cpe:2.3:o:weidmueller:iot-gw30-4g-eu_firmware:1.12.1:*:*:*:*:*:*:*1.12.1VulnerableWeidmueller
cpe:2.3:h:weidmueller:iot-gw30-4g-eu:-:*:*:*:*:*:*:*not specified by NVDRunning onWeidmueller
  • cpe:2.3:o:weidmueller:iot-gw30_firmware:1.12.1:*:*:*:*:*:*:* Versions 1.12.1 Vulnerable ·Weidmueller
  • cpe:2.3:h:weidmueller:iot-gw30:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Weidmueller
  • cpe:2.3:o:weidmueller:iot-gw30-4g-eu_firmware:*:*:*:*:*:*:*:* Versions 1.3.0 to before 1.9.1; 1.10.0 to before 1.10.3 Vulnerable ·Weidmueller
  • cpe:2.3:o:weidmueller:iot-gw30-4g-eu_firmware:1.11.0:*:*:*:*:*:*:* Versions 1.11.0 Vulnerable ·Weidmueller
  • cpe:2.3:o:weidmueller:iot-gw30-4g-eu_firmware:1.12.1:*:*:*:*:*:*:* Versions 1.12.1 Vulnerable ·Weidmueller
  • cpe:2.3:h:weidmueller:iot-gw30-4g-eu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Weidmueller

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-20999
  2. 2026-10-03 Alias added: GHSA-3qph-f3mq-792v

References

Advisory 1

  • TI-2022-02835 Quaonos Schema ST4 example templates prone to XSS CVSS 3.1MEDIUM 6.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences