Weidmueller: Out-of-Bounds Write Vulnerability in Industrial Ethernet Switches
Priority LOW 39CWE-787Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.
Summary
An unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer, potentially leading to a denial-of-service condition for the devices.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00521 44th percentileScored 2026-11-07
Fix Fixed IE-SW-VL05M-5TX (Weidmueller): 3.6.32IE-SW-VL05MT-5TX (Weidmueller): 3.6.32+11 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Weidmueller | IE-SW-VL05M-5TX | 0.0.0 to before 3.6.32 | 3.6.32 | Patch available | CNA |
| Weidmueller | IE-SW-VL05MT-5TX | 0.0.0 to before 3.6.32 | 3.6.32 | Patch available | CNA |
| Weidmueller | IE-SW-VL08MT-8TX | 0.0.0 to before 3.5.36 | 3.5.36 | Patch available | CNA |
| Weidmueller | IE-SW-VL08MT-5TX-1SC-2SCS | 0.0.0 to before 3.5.36 | 3.5.36 | Patch available | CNA |
| Weidmueller | IE-SW-VL08MT-6TX-2SC | 0.0.0 to before 3.5.36 | 3.5.36 | Patch available | CNA |
| Weidmueller | IE-SW-VL08MT-6TX-2ST | 0.0.0 to before 3.5.36 | 3.5.36 | Patch available | CNA |
| Weidmueller | IE-SW-VL08MT-6TX-2SCS | 0.0.0 to before 3.5.36 | 3.5.36 | Patch available | CNA |
| Weidmueller | IE-SW-PL10M-3GT-7TX | 0.0.0 to before 3.3.34 | 3.3.34 | Patch available | CNA |
| Weidmueller | IE-SW-PL10MT-3GT-7TX | 0.0.0 to before 3.3.34 | 3.3.34 | Patch available | CNA |
| Weidmueller | IE-SW-PL16M-16TX | 0.0.0 to before 3.4.32 | 3.4.32 | Patch available | CNA |
| Weidmueller | IE-SW-PL16MT-16TX | 0.0.0 to before 3.4.32 | 3.4.32 | Patch available | CNA |
| Weidmueller | IE-SW-PL18M-2GC-16TX | 0.0.0 to before 3.4.40 | 3.4.40 | Patch available | CNA |
| Weidmueller | IE-SW-PL18MT-2GC-16TX | 0.0.0 to before 3.4.40 | 3.4.40 | Patch available | CNA |
- IE-SW-VL05M-5TX VendorWeidmueller Affected 0.0.0 to before 3.6.32 Fixed in 3.6.32 Patch available CNA
- IE-SW-VL05MT-5TX VendorWeidmueller Affected 0.0.0 to before 3.6.32 Fixed in 3.6.32 Patch available CNA
- IE-SW-VL08MT-8TX VendorWeidmueller Affected 0.0.0 to before 3.5.36 Fixed in 3.5.36 Patch available CNA
- IE-SW-VL08MT-5TX-1SC-2SCS VendorWeidmueller Affected 0.0.0 to before 3.5.36 Fixed in 3.5.36 Patch available CNA
- IE-SW-VL08MT-6TX-2SC VendorWeidmueller Affected 0.0.0 to before 3.5.36 Fixed in 3.5.36 Patch available CNA
- IE-SW-VL08MT-6TX-2ST VendorWeidmueller Affected 0.0.0 to before 3.5.36 Fixed in 3.5.36 Patch available CNA
- IE-SW-VL08MT-6TX-2SCS VendorWeidmueller Affected 0.0.0 to before 3.5.36 Fixed in 3.5.36 Patch available CNA
- IE-SW-PL10M-3GT-7TX VendorWeidmueller Affected 0.0.0 to before 3.3.34 Fixed in 3.3.34 Patch available CNA
- IE-SW-PL10MT-3GT-7TX VendorWeidmueller Affected 0.0.0 to before 3.3.34 Fixed in 3.3.34 Patch available CNA
- IE-SW-PL16M-16TX VendorWeidmueller Affected 0.0.0 to before 3.4.32 Fixed in 3.4.32 Patch available CNA
- IE-SW-PL16MT-16TX VendorWeidmueller Affected 0.0.0 to before 3.4.32 Fixed in 3.4.32 Patch available CNA
- IE-SW-PL18M-2GC-16TX VendorWeidmueller Affected 0.0.0 to before 3.4.40 Fixed in 3.4.40 Patch available CNA
- IE-SW-PL18MT-2GC-16TX VendorWeidmueller Affected 0.0.0 to before 3.4.40 Fixed in 3.4.40 Patch available CNA
Remediation
- Fix · CNA IE-SW-VL05M-5TX (Weidmueller) Fixed in 3.6.32
- Fix · CNA IE-SW-VL05MT-5TX (Weidmueller) Fixed in 3.6.32
- Fix · CNA IE-SW-VL08MT-8TX (Weidmueller) Fixed in 3.5.36
- Fix · CNA IE-SW-VL08MT-5TX-1SC-2SCS (Weidmueller) Fixed in 3.5.36
- Fix · CNA IE-SW-VL08MT-6TX-2SC (Weidmueller) Fixed in 3.5.36
- Fix · CNA IE-SW-VL08MT-6TX-2ST (Weidmueller) Fixed in 3.5.36
- Fix · CNA IE-SW-VL08MT-6TX-2SCS (Weidmueller) Fixed in 3.5.36
- Fix · CNA IE-SW-PL10M-3GT-7TX (Weidmueller) Fixed in 3.3.34
- Fix · CNA IE-SW-PL10MT-3GT-7TX (Weidmueller) Fixed in 3.3.34
- Fix · CNA IE-SW-PL16M-16TX (Weidmueller) Fixed in 3.4.32
- Fix · CNA IE-SW-PL16MT-16TX (Weidmueller) Fixed in 3.4.32
- Fix · CNA IE-SW-PL18M-2GC-16TX (Weidmueller) Fixed in 3.4.40
- Fix · CNA IE-SW-PL18MT-2GC-16TX (Weidmueller) Fixed in 3.4.40
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Weidmueller IE-SW-PL10M-3GT-7TX, IE-SW-PL10MT-3GT-7TX and 10 more products 3.3.34, 3.4.32 and 3 more versions
5 records Highest priority Priority MEDIUM 3 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2025-27617 Weidmueller: Missing Authentication Vulnerability in Industrial Ethernet SwitchesPriority MEDIUM 50
- TI-2025-27618 Weidmueller: Authentication Bypass Vulnerability in Industrial Ethernet SwitchesPriority MEDIUM 49
- TI-2025-27619 Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet SwitchesPriority MEDIUM 40
- Release ·
Weidmueller IE-SW-VL08MT-8TX 3.5.36
4 records Highest priority Priority MEDIUM 2 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2025-27617 Weidmueller: Missing Authentication Vulnerability in Industrial Ethernet SwitchesPriority MEDIUM 50
- TI-2025-27619 Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet SwitchesPriority MEDIUM 40
- TI-2025-27616 Weidmueller: Denial-of-Service Vulnerability in Industrial Ethernet SwitchesPriority LOW 39
Timeline
- 2026-10-02 Threatist record created from CVE-2025-41649
- 2026-10-03 Alias added: GHSA-cqf6-46v7-x75c
References
More Weidmueller vulnerabilities
- TI-2025-27672 Command injection in power analyzer via Modbus-TCP and Modbus-RTU CVSS 3.1CRITICAL 9.8
- TI-2025-27650 Weidmueller: Unauthenticated Stack-Based Buffer Overflow in u-link Management API CVSS 3.1CRITICAL 9.8
- TI-2025-27628 Weidmueller: Security routers IE-SR-2TX are affected by Command Injection CVSS 3.1CRITICAL 9.8
- TI-2025-27617 Weidmueller: Missing Authentication Vulnerability in Industrial Ethernet Switches CVSS 3.1CRITICAL 9.8
- TI-2025-01197 Weidmueller: Authentication Vulnerability due to Hard-coded Credentials CVSS 3.1CRITICAL 9.8
- TI-2025-27618 Weidmueller: Authentication Bypass Vulnerability in Industrial Ethernet Switches CVSS 3.1CRITICAL 9.8
Sources
- CVE-2025-41649 · CVE Program
- CVE-2025-41649 · NVD
- FIRST EPSS
- GHSA-cqf6-46v7-x75c · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences