Ie Sw Pl16M 16Tx
Approved changes feed: RSS · Atom
cpe:2.3:a:weidmueller:ie-sw-pl16m-16tx:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Weidmueller (498b376d-5f65-598c-85a5-132b4a631d9c) |
|---|---|
| Product | Ie Sw Pl16M 16Tx (ba2ccb50-91de-56d5-be74-3a5edaee7e1f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-41653 |
vulnerable | 2026-06-08 07:25:07.097615 |
Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet Switches
HIGH (7.5)
An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicious header, potentially causing the server to crash or become unresponsive.
Published: 2025-05-27T08:38:29.005Z
Updated: 2025-05-27T13:12:39.961Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41652 |
vulnerable | 2026-06-08 07:25:07.096381 |
Weidmueller: Authentication Bypass Vulnerability in Industrial Ethernet Switches
CRITICAL (9.8)
The devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism. An unauthenticated remote attacker could exploit this weakness by performing brute-force attacks to guess valid credentials or by using MD5 collision techniques to forge authentication hashes, potentially compromising the device.
Published: 2025-05-27T08:38:12.340Z
Updated: 2025-08-22T10:36:13.148Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41651 |
vulnerable | 2026-06-08 07:25:07.095104 |
Weidmueller: Missing Authentication Vulnerability in Industrial Ethernet Switches
CRITICAL (9.8)
Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise.
Published: 2025-05-27T08:38:03.213Z
Updated: 2025-05-27T13:26:59.857Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41650 |
vulnerable | 2026-06-08 07:25:07.094015 |
Weidmueller: Denial-of-Service Vulnerability in Industrial Ethernet Switches
HIGH (7.5)
An unauthenticated remote attacker can exploit input validation in cmd services of the devices, allowing them to disrupt system operations and potentially cause a denial-of-service.
Published: 2025-05-27T08:37:44.635Z
Updated: 2025-05-27T13:39:51.332Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41649 |
vulnerable | 2026-06-08 07:25:07.091261 |
Weidmueller: Out-of-Bounds Write Vulnerability in Industrial Ethernet Switches
HIGH (7.5)
An unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer, potentially leading to a denial-of-service condition for the devices.
Published: 2025-05-27T08:37:26.201Z
Updated: 2025-05-27T13:57:42.958Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.