TI-2025-27628 Aliases CVE-2025-41663 GHSA-9qwf-3rj7-3qff

Weidmueller: Security routers IE-SR-2TX are affected by Command Injection

MEDIUM 50CWE-78Published 2025-06-11 · Updated 2025-07-24

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

For u-link Management API an unauthenticated remote attacker in a man-in-the-middle position can inject arbitrary commands in responses returned by WWH servers, which are then executed with elevated privileges. To get into such a position, clients would need to use insecure proxy configurations.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00649 51st percentileScored 2026-11-07

Fix Fixed IE-SR-2TX-WL (Weidmueller): V1.49IE-SR-2TX-WL-4G-EU (Weidmueller): V1.62+1 more product

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Weidmueller	IE-SR-2TX-WL	before V1.49	V1.49	Patch available	CNA
Weidmueller	IE-SR-2TX-WL-4G-EU	before V1.62	V1.62	Patch available	CNA
Weidmueller	IE-SR-2TX-WL-4G-US-V	before V1.62	V1.62	Patch available	CNA

IE-SR-2TX-WL VendorWeidmueller Affected before V1.49 Fixed in V1.49 Patch available CNA
IE-SR-2TX-WL-4G-EU VendorWeidmueller Affected before V1.62 Fixed in V1.62 Patch available CNA
IE-SR-2TX-WL-4G-US-V VendorWeidmueller Affected before V1.62 Fixed in V1.62 Patch available CNA

Remediation

Fix · CNA IE-SR-2TX-WL (Weidmueller) Fixed in V1.49
Fix · CNA IE-SR-2TX-WL-4G-EU (Weidmueller) Fixed in V1.62
Fix · CNA IE-SR-2TX-WL-4G-US-V (Weidmueller) Fixed in V1.62

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Release · 2025-06-11
Weidmueller IE-SR-2TX-WL, IE-SR-2TX-WL-4G-EU, IE-SR-2TX-WL-4G-US-V V1.49, V1.62
2 records Highest priority Priority MEDIUM 2 MEDIUM
Other records, highest priority first
- TI-2025-27627 Weidmueller: Security routers IE-SR-2TX are affected by CSRFPriority MEDIUM 40
Show all 2 records →

Timeline

2026-10-02 Threatist record created from CVE-2025-41663
2026-10-03 Alias added: GHSA-9qwf-3rj7-3qff
2026-10-20 EPSS moved to the 50th–90th percentile

References

Other 1

https://certvde.com/en/advisories/VDE-2025-052

TI-2025-27672 Command injection in power analyzer via Modbus-TCP and Modbus-RTU CVSS 3.1CRITICAL 9.8
TI-2025-27650 Weidmueller: Unauthenticated Stack-Based Buffer Overflow in u-link Management API CVSS 3.1CRITICAL 9.8
TI-2025-27617 Weidmueller: Missing Authentication Vulnerability in Industrial Ethernet Switches CVSS 3.1CRITICAL 9.8
TI-2025-01197 Weidmueller: Authentication Vulnerability due to Hard-coded Credentials CVSS 3.1CRITICAL 9.8
TI-2025-27618 Weidmueller: Authentication Bypass Vulnerability in Industrial Ethernet Switches CVSS 3.1CRITICAL 9.8
TI-2019-12470 An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT… CVSS 3.1CRITICAL 9.8

See all 34 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences