CVE-2025-41687

published 2025-07-23

CVE-2025-41687: An unauthenticated remote attacker may use a stack based buffer overflow in the u-link Management API to gain full access on the affected devices.

Priority P2 68 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

An unauthenticated remote attacker may use a stack based buffer overflow in the u-link Management API to gain full access on the affected devices.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
weidmueller	ie-sr-2tx-wl	>= V0.0 < V1.49	V1.49
weidmueller	ie-sr-2tx-wl-4g-eu	>= V0.0 < V1.62	V1.62
weidmueller	ie-sr-2tx-wl-4g-us-v	>= V0.0 < V1.62	V1.62

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-121