CVE-2021-33538

published 2021-06-25

CVE-2021-33538: In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs account settings…

Priority P3 54 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs account settings functionality. A specially crafted user name entry can cause the overwrite of an existing user account password, resulting in remote shell access to the device as that user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.

Affected

24 ranges

Vendor	Product	Version range	Fixed in
weidm_ller	ie-wl_bl-ap-cl-xx	IE-WL-BL-AP-CL-EU (2536600000) – V1.16.18 (Build 18081617)	—
weidm_ller	ie-wl_bl-ap-cl-xx	IE-WL-BL-AP-CL-US (2536660000) – V1.16.18 (Build 18081617)	—
weidm_ller	ie-wl_bl-ap-cl-xx	IE-WLT-BL-AP-CL-EU (2536650000) – V1.16.18 (Build 18081617)	—
weidm_ller	ie-wl_bl-ap-cl-xx	IE-WLT-BL-AP-CL-US (2536670000) – V1.16.18 (Build 18081617)	—
weidm_ller	ie-wl_vl-ap-cl-xx	IE-WL-VL-AP-BR-CL-EU (2536680000) – V1.11.10 (Build 18122616)	—
weidm_ller	ie-wl_vl-ap-cl-xx	IE-WL-VL-AP-BR-CL-US (2536700000) – V1.11.10 (Build 18122616)	—
weidm_ller	ie-wl_vl-ap-cl-xx	IE-WLT-VL-AP-BR-CL-EU (2536690000) – V1.11.10 (Build 18122616)	—
weidm_ller	ie-wl_vl-ap-cl-xx	IE-WLT-VL-AP-BR-CL-US (2536710000) – V1.11.10 (Build 18122616)	—
weidmueller	ie-wl-bl-ap-cl-eu_firmware	<= 1.16.18	—
weidmueller	ie-wl-bl-ap-cl-eu_firmware	<= 1.11.10	—
weidmueller	ie-wl-bl-ap-cl-us_firmware	<= 1.16.18	—
weidmueller	ie-wl-bl-ap-cl-us_firmware	<= 1.11.10	—
weidmueller	ie-wl-vl-ap-br-cl-eu_firmware	<= 1.16.18	—
weidmueller	ie-wl-vl-ap-br-cl-eu_firmware	<= 1.11.10	—
weidmueller	ie-wl-vl-ap-br-cl-us_firmware	<= 1.16.18	—
weidmueller	ie-wl-vl-ap-br-cl-us_firmware	<= 1.11.10	—
weidmueller	ie-wlt-bl-ap-cl-eu_firmware	<= 1.16.18	—
weidmueller	ie-wlt-bl-ap-cl-eu_firmware	<= 1.11.10	—
weidmueller	ie-wlt-bl-ap-cl-us_firmware	<= 1.16.18	—
weidmueller	ie-wlt-bl-ap-cl-us_firmware	<= 1.11.10	—
weidmueller	ie-wlt-vl-ap-br-cl-eu_firmware	<= 1.16.18	—
weidmueller	ie-wlt-vl-ap-br-cl-eu_firmware	<= 1.11.10	—
weidmueller	ie-wlt-vl-ap-br-cl-us_firmware	<= 1.16.18	—
weidmueller	ie-wlt-vl-ap-br-cl-us_firmware	<= 1.11.10	—

CVSS provenance

nvd v3.1 8.8 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 9.0 CRITICAL AV:N/AC:L/Au:S/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-269