Weidmueller: Root Command Injection via Unsanitized Input in tls_iotgen_setting Endpoint
Priority MEDIUM 42CWE-78Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-78.
Summary
An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of improper sanitizing of user input in the Main Web Interface (endpoint tls_iotgen_setting).
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00837 57th percentileScored 2026-11-07
Fix Fixed IE-SR-2TX-WL (Weidmueller): V1.49IE-SR-2TX-WL-4G-EU (Weidmueller): V1.62+1 more product
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Weidmueller | IE-SR-2TX-WL | V0.0 to before V1.49 | V1.49 | Patch available | CNA |
| Weidmueller | IE-SR-2TX-WL-4G-EU | V0.0 to before V1.62 | V1.62 | Patch available | CNA |
| Weidmueller | IE-SR-2TX-WL-4G-US-V | V0.0 to before V1.62 | V1.62 | Patch available | CNA |
- IE-SR-2TX-WL VendorWeidmueller Affected V0.0 to before V1.49 Fixed in V1.49 Patch available CNA
- IE-SR-2TX-WL-4G-EU VendorWeidmueller Affected V0.0 to before V1.62 Fixed in V1.62 Patch available CNA
- IE-SR-2TX-WL-4G-US-V VendorWeidmueller Affected V0.0 to before V1.62 Fixed in V1.62 Patch available CNA
Remediation
- Fix · CNA IE-SR-2TX-WL (Weidmueller) Fixed in V1.49
- Fix · CNA IE-SR-2TX-WL-4G-EU (Weidmueller) Fixed in V1.62
- Fix · CNA IE-SR-2TX-WL-4G-US-V (Weidmueller) Fixed in V1.62
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Weidmueller IE-SR-2TX-WL, IE-SR-2TX-WL-4G-EU, IE-SR-2TX-WL-4G-US-V V1.49, V1.62
3 records Highest priority Priority MEDIUM 3 MEDIUM
Other records, highest priority first
- TI-2025-27650 Weidmueller: Unauthenticated Stack-Based Buffer Overflow in u-link Management APIPriority MEDIUM 50
- TI-2025-27646 Weidmueller: Root Command Injection via Unsanitized Input in event_mail_test EndpointPriority MEDIUM 42
Timeline
- 2026-10-02 Threatist record created from CVE-2025-41684
- 2026-10-03 Alias added: GHSA-82xq-q5gh-j52r
References
More Weidmueller vulnerabilities
- TI-2025-27672 Command injection in power analyzer via Modbus-TCP and Modbus-RTU CVSS 3.1CRITICAL 9.8
- TI-2025-27650 Weidmueller: Unauthenticated Stack-Based Buffer Overflow in u-link Management API CVSS 3.1CRITICAL 9.8
- TI-2025-27628 Weidmueller: Security routers IE-SR-2TX are affected by Command Injection CVSS 3.1CRITICAL 9.8
- TI-2025-27617 Weidmueller: Missing Authentication Vulnerability in Industrial Ethernet Switches CVSS 3.1CRITICAL 9.8
- TI-2025-01197 Weidmueller: Authentication Vulnerability due to Hard-coded Credentials CVSS 3.1CRITICAL 9.8
- TI-2025-27618 Weidmueller: Authentication Bypass Vulnerability in Industrial Ethernet Switches CVSS 3.1CRITICAL 9.8
Sources
- CVE-2025-41684 · CVE Program
- CVE-2025-41684 · NVD
- FIRST EPSS
- GHSA-82xq-q5gh-j52r · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences