Weidmueller: Authentication Bypass Vulnerability in Industrial Ethernet Switches
Priority MEDIUM 49CWE-328Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
The devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism. An unauthenticated remote attacker could exploit this weakness by performing brute-force attacks to guess valid credentials or by using MD5 collision techniques to forge authentication hashes, potentially compromising the device.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00491 42nd percentileScored 2026-11-07
Fix Fixed IE-SW-VL05M-5TX (Weidmueller): 3.6.32IE-SW-VL05MT-5TX (Weidmueller): 3.6.32+11 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Weidmueller | IE-SW-VL05M-5TX | 0.0.0 to before 3.6.32 | 3.6.32 | Patch available | CNA |
| Weidmueller | IE-SW-VL05MT-5TX | 0.0.0 to before 3.6.32 | 3.6.32 | Patch available | CNA |
| Weidmueller | IE-SW-VL08MT-8TX | 0.0.0 to before 3.6.32 | 3.6.32 | Patch available | CNA |
| Weidmueller | IE-SW-VL08MT-5TX-1SC-2SCS | 0.0.0 to before 3.5.36 | 3.5.36 | Patch available | CNA |
| Weidmueller | IE-SW-VL08MT-6TX-2SC | 0.0.0 to before 3.5.36 | 3.5.36 | Patch available | CNA |
| Weidmueller | IE-SW-VL08MT-6TX-2ST | 0.0.0 to before 3.5.36 | 3.5.36 | Patch available | CNA |
| Weidmueller | IE-SW-VL08MT-6TX-2SCS | 0.0.0 to before 3.5.36 | 3.5.36 | Patch available | CNA |
| Weidmueller | IE-SW-PL10M-3GT-7TX | 0.0.0 to before 3.3.34 | 3.3.34 | Patch available | CNA |
| Weidmueller | IE-SW-PL10MT-3GT-7TX | 0.0.0 to before 3.3.34 | 3.3.34 | Patch available | CNA |
| Weidmueller | IE-SW-PL16M-16TX | 0.0.0 to before 3.4.32 | 3.4.32 | Patch available | CNA |
| Weidmueller | IE-SW-PL16MT-16TX | 0.0.0 to before 3.4.32 | 3.4.32 | Patch available | CNA |
| Weidmueller | IE-SW-PL18M-2GC-16TX | 0.0.0 to before 3.4.40 | 3.4.40 | Patch available | CNA |
| Weidmueller | IE-SW-PL18MT-2GC-16TX | 0.0.0 to before 3.4.40 | 3.4.40 | Patch available | CNA |
- IE-SW-VL05M-5TX VendorWeidmueller Affected 0.0.0 to before 3.6.32 Fixed in 3.6.32 Patch available CNA
- IE-SW-VL05MT-5TX VendorWeidmueller Affected 0.0.0 to before 3.6.32 Fixed in 3.6.32 Patch available CNA
- IE-SW-VL08MT-8TX VendorWeidmueller Affected 0.0.0 to before 3.6.32 Fixed in 3.6.32 Patch available CNA
- IE-SW-VL08MT-5TX-1SC-2SCS VendorWeidmueller Affected 0.0.0 to before 3.5.36 Fixed in 3.5.36 Patch available CNA
- IE-SW-VL08MT-6TX-2SC VendorWeidmueller Affected 0.0.0 to before 3.5.36 Fixed in 3.5.36 Patch available CNA
- IE-SW-VL08MT-6TX-2ST VendorWeidmueller Affected 0.0.0 to before 3.5.36 Fixed in 3.5.36 Patch available CNA
- IE-SW-VL08MT-6TX-2SCS VendorWeidmueller Affected 0.0.0 to before 3.5.36 Fixed in 3.5.36 Patch available CNA
- IE-SW-PL10M-3GT-7TX VendorWeidmueller Affected 0.0.0 to before 3.3.34 Fixed in 3.3.34 Patch available CNA
- IE-SW-PL10MT-3GT-7TX VendorWeidmueller Affected 0.0.0 to before 3.3.34 Fixed in 3.3.34 Patch available CNA
- IE-SW-PL16M-16TX VendorWeidmueller Affected 0.0.0 to before 3.4.32 Fixed in 3.4.32 Patch available CNA
- IE-SW-PL16MT-16TX VendorWeidmueller Affected 0.0.0 to before 3.4.32 Fixed in 3.4.32 Patch available CNA
- IE-SW-PL18M-2GC-16TX VendorWeidmueller Affected 0.0.0 to before 3.4.40 Fixed in 3.4.40 Patch available CNA
- IE-SW-PL18MT-2GC-16TX VendorWeidmueller Affected 0.0.0 to before 3.4.40 Fixed in 3.4.40 Patch available CNA
Remediation
- Fix · CNA IE-SW-VL05M-5TX (Weidmueller) Fixed in 3.6.32
- Fix · CNA IE-SW-VL05MT-5TX (Weidmueller) Fixed in 3.6.32
- Fix · CNA IE-SW-VL08MT-8TX (Weidmueller) Fixed in 3.6.32
- Fix · CNA IE-SW-VL08MT-5TX-1SC-2SCS (Weidmueller) Fixed in 3.5.36
- Fix · CNA IE-SW-VL08MT-6TX-2SC (Weidmueller) Fixed in 3.5.36
- Fix · CNA IE-SW-VL08MT-6TX-2ST (Weidmueller) Fixed in 3.5.36
- Fix · CNA IE-SW-VL08MT-6TX-2SCS (Weidmueller) Fixed in 3.5.36
- Fix · CNA IE-SW-PL10M-3GT-7TX (Weidmueller) Fixed in 3.3.34
- Fix · CNA IE-SW-PL10MT-3GT-7TX (Weidmueller) Fixed in 3.3.34
- Fix · CNA IE-SW-PL16M-16TX (Weidmueller) Fixed in 3.4.32
- Fix · CNA IE-SW-PL16MT-16TX (Weidmueller) Fixed in 3.4.32
- Fix · CNA IE-SW-PL18M-2GC-16TX (Weidmueller) Fixed in 3.4.40
- Fix · CNA IE-SW-PL18MT-2GC-16TX (Weidmueller) Fixed in 3.4.40
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Weidmueller IE-SW-PL10M-3GT-7TX, IE-SW-PL10MT-3GT-7TX and 10 more products 3.3.34, 3.4.32 and 3 more versions
5 records Highest priority Priority MEDIUM 3 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2025-27617 Weidmueller: Missing Authentication Vulnerability in Industrial Ethernet SwitchesPriority MEDIUM 50
- TI-2025-27619 Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet SwitchesPriority MEDIUM 40
- TI-2025-27616 Weidmueller: Denial-of-Service Vulnerability in Industrial Ethernet SwitchesPriority LOW 39
Timeline
- 2026-10-02 Threatist record created from CVE-2025-41652
- 2026-10-03 Alias added: GHSA-hmwm-86jc-9m8g
References
More Weidmueller vulnerabilities
- TI-2025-27672 Command injection in power analyzer via Modbus-TCP and Modbus-RTU CVSS 3.1CRITICAL 9.8
- TI-2025-27650 Weidmueller: Unauthenticated Stack-Based Buffer Overflow in u-link Management API CVSS 3.1CRITICAL 9.8
- TI-2025-27628 Weidmueller: Security routers IE-SR-2TX are affected by Command Injection CVSS 3.1CRITICAL 9.8
- TI-2025-27617 Weidmueller: Missing Authentication Vulnerability in Industrial Ethernet Switches CVSS 3.1CRITICAL 9.8
- TI-2025-01197 Weidmueller: Authentication Vulnerability due to Hard-coded Credentials CVSS 3.1CRITICAL 9.8
- TI-2019-12470 An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2025-41652 · CVE Program
- CVE-2025-41652 · NVD
- FIRST EPSS
- GHSA-hmwm-86jc-9m8g · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences