Approved changes feed: RSS · Atom

cpe:2.3:a:weidmueller:ie-sw-pl18mt-2gc-16tx:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWeidmueller (498b376d-5f65-598c-85a5-132b4a631d9c)
ProductIe Sw Pl18Mt 2Gc 16Tx (3106bb35-d6fb-5f14-8f62-ab13cc135078)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41653 vulnerable 2026-06-08 07:25:07.097783 Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet Switches
HIGH (7.5)
An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicious header, potentially causing the server to crash or become unresponsive.
Published: 2025-05-27T08:38:29.005Z
Updated: 2025-05-27T13:12:39.961Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41652 vulnerable 2026-06-08 07:25:07.096539 Weidmueller: Authentication Bypass Vulnerability in Industrial Ethernet Switches
CRITICAL (9.8)
The devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism. An unauthenticated remote attacker could exploit this weakness by performing brute-force attacks to guess valid credentials or by using MD5 collision techniques to forge authentication hashes, potentially compromising the device.
Published: 2025-05-27T08:38:12.340Z
Updated: 2025-08-22T10:36:13.148Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41651 vulnerable 2026-06-08 07:25:07.095170 Weidmueller: Missing Authentication Vulnerability in Industrial Ethernet Switches
CRITICAL (9.8)
Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise.
Published: 2025-05-27T08:38:03.213Z
Updated: 2025-05-27T13:26:59.857Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41650 vulnerable 2026-06-08 07:25:07.094076 Weidmueller: Denial-of-Service Vulnerability in Industrial Ethernet Switches
HIGH (7.5)
An unauthenticated remote attacker can exploit input validation in cmd services of the devices, allowing them to disrupt system operations and potentially cause a denial-of-service.
Published: 2025-05-27T08:37:44.635Z
Updated: 2025-05-27T13:39:51.332Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41649 vulnerable 2026-06-08 07:25:07.093327 Weidmueller: Out-of-Bounds Write Vulnerability in Industrial Ethernet Switches
HIGH (7.5)
An unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer, potentially leading to a denial-of-service condition for the devices.
Published: 2025-05-27T08:37:26.201Z
Updated: 2025-05-27T13:57:42.958Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.