Weidmueller: Missing Authentication Vulnerability in Industrial Ethernet Switches
Priority MEDIUM 50CWE-306Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-306.
Summary
Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00642 51st percentileScored 2026-11-07
Fix Fixed IE-SW-VL05M-5TX (Weidmueller): 3.6.32IE-SW-VL05MT-5TX (Weidmueller): 3.6.32+11 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Weidmueller | IE-SW-VL05M-5TX | 0.0.0 to before 3.6.32 | 3.6.32 | Patch available | CNA |
| Weidmueller | IE-SW-VL05MT-5TX | 0.0.0 to before 3.6.32 | 3.6.32 | Patch available | CNA |
| Weidmueller | IE-SW-VL08MT-8TX | 0.0.0 to before 3.5.36 | 3.5.36 | Patch available | CNA |
| Weidmueller | IE-SW-VL08MT-5TX-1SC-2SCS | 0.0.0 to before 3.5.36 | 3.5.36 | Patch available | CNA |
| Weidmueller | IE-SW-VL08MT-6TX-2SC | 0.0.0 to before 3.5.36 | 3.5.36 | Patch available | CNA |
| Weidmueller | IE-SW-VL08MT-6TX-2ST | 0.0.0 to before 3.5.36 | 3.5.36 | Patch available | CNA |
| Weidmueller | IE-SW-VL08MT-6TX-2SCS | 0.0.0 to before 3.5.36 | 3.5.36 | Patch available | CNA |
| Weidmueller | IE-SW-PL10M-3GT-7TX | 0.0.0 to before 3.3.34 | 3.3.34 | Patch available | CNA |
| Weidmueller | IE-SW-PL10MT-3GT-7TX | 0.0.0 to before 3.3.34 | 3.3.34 | Patch available | CNA |
| Weidmueller | IE-SW-PL16M-16TX | 0.0.0 to before 3.4.32 | 3.4.32 | Patch available | CNA |
| Weidmueller | IE-SW-PL16MT-16TX | 0.0.0 to before 3.4.32 | 3.4.32 | Patch available | CNA |
| Weidmueller | IE-SW-PL18M-2GC-16TX | 0.0.0 to before 3.4.40 | 3.4.40 | Patch available | CNA |
| Weidmueller | IE-SW-PL18MT-2GC-16TX | 0.0.0 to before 3.4.40 | 3.4.40 | Patch available | CNA |
- IE-SW-VL05M-5TX VendorWeidmueller Affected 0.0.0 to before 3.6.32 Fixed in 3.6.32 Patch available CNA
- IE-SW-VL05MT-5TX VendorWeidmueller Affected 0.0.0 to before 3.6.32 Fixed in 3.6.32 Patch available CNA
- IE-SW-VL08MT-8TX VendorWeidmueller Affected 0.0.0 to before 3.5.36 Fixed in 3.5.36 Patch available CNA
- IE-SW-VL08MT-5TX-1SC-2SCS VendorWeidmueller Affected 0.0.0 to before 3.5.36 Fixed in 3.5.36 Patch available CNA
- IE-SW-VL08MT-6TX-2SC VendorWeidmueller Affected 0.0.0 to before 3.5.36 Fixed in 3.5.36 Patch available CNA
- IE-SW-VL08MT-6TX-2ST VendorWeidmueller Affected 0.0.0 to before 3.5.36 Fixed in 3.5.36 Patch available CNA
- IE-SW-VL08MT-6TX-2SCS VendorWeidmueller Affected 0.0.0 to before 3.5.36 Fixed in 3.5.36 Patch available CNA
- IE-SW-PL10M-3GT-7TX VendorWeidmueller Affected 0.0.0 to before 3.3.34 Fixed in 3.3.34 Patch available CNA
- IE-SW-PL10MT-3GT-7TX VendorWeidmueller Affected 0.0.0 to before 3.3.34 Fixed in 3.3.34 Patch available CNA
- IE-SW-PL16M-16TX VendorWeidmueller Affected 0.0.0 to before 3.4.32 Fixed in 3.4.32 Patch available CNA
- IE-SW-PL16MT-16TX VendorWeidmueller Affected 0.0.0 to before 3.4.32 Fixed in 3.4.32 Patch available CNA
- IE-SW-PL18M-2GC-16TX VendorWeidmueller Affected 0.0.0 to before 3.4.40 Fixed in 3.4.40 Patch available CNA
- IE-SW-PL18MT-2GC-16TX VendorWeidmueller Affected 0.0.0 to before 3.4.40 Fixed in 3.4.40 Patch available CNA
Remediation
- Fix · CNA IE-SW-VL05M-5TX (Weidmueller) Fixed in 3.6.32
- Fix · CNA IE-SW-VL05MT-5TX (Weidmueller) Fixed in 3.6.32
- Fix · CNA IE-SW-VL08MT-8TX (Weidmueller) Fixed in 3.5.36
- Fix · CNA IE-SW-VL08MT-5TX-1SC-2SCS (Weidmueller) Fixed in 3.5.36
- Fix · CNA IE-SW-VL08MT-6TX-2SC (Weidmueller) Fixed in 3.5.36
- Fix · CNA IE-SW-VL08MT-6TX-2ST (Weidmueller) Fixed in 3.5.36
- Fix · CNA IE-SW-VL08MT-6TX-2SCS (Weidmueller) Fixed in 3.5.36
- Fix · CNA IE-SW-PL10M-3GT-7TX (Weidmueller) Fixed in 3.3.34
- Fix · CNA IE-SW-PL10MT-3GT-7TX (Weidmueller) Fixed in 3.3.34
- Fix · CNA IE-SW-PL16M-16TX (Weidmueller) Fixed in 3.4.32
- Fix · CNA IE-SW-PL16MT-16TX (Weidmueller) Fixed in 3.4.32
- Fix · CNA IE-SW-PL18M-2GC-16TX (Weidmueller) Fixed in 3.4.40
- Fix · CNA IE-SW-PL18MT-2GC-16TX (Weidmueller) Fixed in 3.4.40
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Weidmueller IE-SW-PL10M-3GT-7TX, IE-SW-PL10MT-3GT-7TX and 10 more products 3.3.34, 3.4.32 and 3 more versions
5 records Highest priority Priority MEDIUM 3 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2025-27618 Weidmueller: Authentication Bypass Vulnerability in Industrial Ethernet SwitchesPriority MEDIUM 49
- TI-2025-27619 Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet SwitchesPriority MEDIUM 40
- TI-2025-27616 Weidmueller: Denial-of-Service Vulnerability in Industrial Ethernet SwitchesPriority LOW 39
- Release ·
Weidmueller IE-SW-VL08MT-8TX 3.5.36
4 records Highest priority Priority MEDIUM 2 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2025-27619 Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet SwitchesPriority MEDIUM 40
- TI-2025-27616 Weidmueller: Denial-of-Service Vulnerability in Industrial Ethernet SwitchesPriority LOW 39
- TI-2025-27615 Weidmueller: Out-of-Bounds Write Vulnerability in Industrial Ethernet SwitchesPriority LOW 39
Timeline
- 2026-10-02 Threatist record created from CVE-2025-41651
- 2026-10-03 Alias added: GHSA-wppq-rwh9-h7pf
- 2026-10-23 EPSS moved to the 50th–90th percentile
References
More Weidmueller vulnerabilities
- TI-2025-27672 Command injection in power analyzer via Modbus-TCP and Modbus-RTU CVSS 3.1CRITICAL 9.8
- TI-2025-27650 Weidmueller: Unauthenticated Stack-Based Buffer Overflow in u-link Management API CVSS 3.1CRITICAL 9.8
- TI-2025-27628 Weidmueller: Security routers IE-SR-2TX are affected by Command Injection CVSS 3.1CRITICAL 9.8
- TI-2025-01197 Weidmueller: Authentication Vulnerability due to Hard-coded Credentials CVSS 3.1CRITICAL 9.8
- TI-2025-27618 Weidmueller: Authentication Bypass Vulnerability in Industrial Ethernet Switches CVSS 3.1CRITICAL 9.8
- TI-2019-12470 An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2025-41651 · CVE Program
- CVE-2025-41651 · NVD
- FIRST EPSS
- GHSA-wppq-rwh9-h7pf · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences