{"containers": {"cna": {"affected": [{"product": "IE-WL(T)-BL-AP-CL-XX", "vendor": "Weidm\u00fcller", "versions": [{"lessThanOrEqual": "V1.16.18 (Build 18081617)", "status": "affected", "version": "IE-WL-BL-AP-CL-EU (2536600000)", "versionType": "custom"}, {"lessThanOrEqual": "V1.16.18 (Build 18081617)", "status": "affected", "version": "IE-WLT-BL-AP-CL-EU (2536650000)", "versionType": "custom"}, {"lessThanOrEqual": "V1.16.18 (Build 18081617)", "status": "affected", "version": "IE-WL-BL-AP-CL-US (2536660000)", "versionType": "custom"}, {"lessThanOrEqual": "V1.16.18 (Build 18081617)", "status": "affected", "version": "IE-WLT-BL-AP-CL-US (2536670000)", "versionType": "custom"}]}, {"product": "IE-WL(T)-VL-AP-CL-XX", "vendor": "Weidm\u00fcller", "versions": [{"lessThanOrEqual": "V1.11.10 (Build 18122616)", "status": "affected", "version": "IE-WL-VL-AP-BR-CL-EU (2536680000)", "versionType": "custom"}, {"lessThanOrEqual": "V1.11.10 (Build 18122616)", "status": "affected", "version": "IE-WLT-VL-AP-BR-CL-EU (2536690000)", "versionType": "custom"}, {"lessThanOrEqual": "V1.11.10 (Build 18122616)", "status": "affected", "version": "IE-WL-VL-AP-BR-CL-US (2536700000)", "versionType": "custom"}, {"lessThanOrEqual": "V1.11.10 (Build 18122616)", "status": "affected", "version": "IE-WLT-VL-AP-BR-CL-US (2536710000)", "versionType": "custom"}]}], "datePublic": "2021-06-23T00:00:00", "descriptions": [{"lang": "en", "value": "In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. A specially configured device hostname can cause the device to interpret selected remote traffic as local traffic, resulting in a bypass of web authentication. An attacker can send authenticated SNMP requests to trigger this vulnerability."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-287", "description": "CWE-287 Improper Authentication", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-06-25T18:26:03", "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://cert.vde.com/en-us/advisories/vde-2021-026"}], "solutions": [{"lang": "en", "value": "For IE-WL(T)-BL-AP-CL-XX versions V1.16.21 (Build 21010513) and greater are fixed.\nFor IE-WL(T)-VL-AP-CL-XX versions V1.11.13 (Build 21010513) and greater are fixed."}], "source": {"advisory": "VDE-2021-026", "defect": ["VDE-2021-026"], "discovery": "EXTERNAL"}, "title": "WEIDMUELLER: WLAN devices affected by authentication bypass vulnerability", "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "info@cert.vde.com", "DATE_PUBLIC": "2021-06-23T10:00:00.000Z", "ID": "CVE-2021-33539", "STATE": "PUBLIC", "TITLE": "WEIDMUELLER: WLAN devices affected by authentication bypass vulnerability"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "IE-WL(T)-BL-AP-CL-XX", "version": {"version_data": [{"version_affected": "<=", "version_name": "IE-WL-BL-AP-CL-EU (2536600000)", "version_value": "V1.16.18 (Build 18081617)"}, {"version_affected": "<=", "version_name": "IE-WLT-BL-AP-CL-EU (2536650000)", "version_value": "V1.16.18 (Build 18081617)"}, {"version_affected": "<=", "version_name": "IE-WL-BL-AP-CL-US (2536660000)", "version_value": "V1.16.18 (Build 18081617)"}, {"version_affected": "<=", "version_name": "IE-WLT-BL-AP-CL-US (2536670000)", "version_value": "V1.16.18 (Build 18081617)"}]}}, {"product_name": "IE-WL(T)-VL-AP-CL-XX", "version": {"version_data": [{"version_affected": "<=", "version_name": "IE-WL-VL-AP-BR-CL-EU (2536680000)", "version_value": "V1.11.10 (Build 18122616)"}, {"version_affected": "<=", "version_name": "IE-WLT-VL-AP-BR-CL-EU (2536690000)", "version_value": "V1.11.10 (Build 18122616)"}, {"version_affected": "<=", "version_name": "IE-WL-VL-AP-BR-CL-US (2536700000)", "version_value": "V1.11.10 (Build 18122616)"}, {"version_affected": "<=", "version_name": "IE-WLT-VL-AP-BR-CL-US (2536710000)", "version_value": "V1.11.10 (Build 18122616)"}]}}]}, "vendor_name": "Weidm\u00fcller"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. A specially configured device hostname can cause the device to interpret selected remote traffic as local traffic, resulting in a bypass of web authentication. An attacker can send authenticated SNMP requests to trigger this vulnerability."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-287 Improper Authentication"}]}]}, "references": {"reference_data": [{"name": "https://cert.vde.com/en-us/advisories/vde-2021-026", "refsource": "CONFIRM", "url": "https://cert.vde.com/en-us/advisories/vde-2021-026"}]}, "solution": [{"lang": "en", "value": "For IE-WL(T)-BL-AP-CL-XX versions V1.16.21 (Build 21010513) and greater are fixed.\nFor IE-WL(T)-VL-AP-CL-XX versions V1.11.13 (Build 21010513) and greater are fixed."}], "source": {"advisory": "VDE-2021-026", "defect": ["VDE-2021-026"], "discovery": "EXTERNAL"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T23:50:43.035Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://cert.vde.com/en-us/advisories/vde-2021-026"}]}]}, "cveMetadata": {"assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "assignerShortName": "CERTVDE", "cveId": "CVE-2021-33539", "datePublished": "2021-06-25T18:26:03.815899Z", "dateReserved": "2021-05-24T00:00:00", "dateUpdated": "2024-09-16T17:43:21.621Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weidmueller:ie-wl-bl-ap-cl-eu_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4E409B45-BF28-41AD-B3A7-656FBAF9597D", "versionEndIncluding": "1.16.18", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weidmueller:ie-wl-bl-ap-cl-eu:-:*:*:*:*:*:*:*", "matchCriteriaId": "26A4612B-2370-42CA-8EC4-5C74382ABDA6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weidmueller:ie-wlt-bl-ap-cl-eu_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "17F26A4C-FDBA-48A8-AC05-1A779F0051F3", "versionEndIncluding": "1.16.18", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weidmueller:ie-wlt-bl-ap-cl-eu:-:*:*:*:*:*:*:*", "matchCriteriaId": "FC895FDA-C846-4885-AADB-DED6EC868C3B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weidmueller:ie-wl-bl-ap-cl-us_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0C589467-C35D-43E8-AE06-9C0541DF2190", "versionEndIncluding": "1.16.18", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weidmueller:ie-wl-bl-ap-cl-us:-:*:*:*:*:*:*:*", "matchCriteriaId": "97D7BBC3-6F43-47B5-81E2-431C8837BB3A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weidmueller:ie-wlt-bl-ap-cl-us_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2E1B5E87-7D1E-45FD-894C-31167B80BEB1", "versionEndIncluding": "1.16.18", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weidmueller:ie-wlt-bl-ap-cl-us:-:*:*:*:*:*:*:*", "matchCriteriaId": "6D38EC42-5C2E-4ACE-88A1-2890632E51DA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weidmueller:ie-wl-vl-ap-br-cl-eu_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5C2C095A-F606-4A7A-9836-EAA17A648E50", "versionEndIncluding": "1.16.18", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weidmueller:ie-wl-vl-ap-br-cl-eu:-:*:*:*:*:*:*:*", "matchCriteriaId": "17790AD1-5DE3-47F4-A16C-67C7DFE56128", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weidmueller:ie-wlt-vl-ap-br-cl-eu_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DE71A6A8-3E2A-4EC3-A719-0AC48B99C1F5", "versionEndIncluding": "1.16.18", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weidmueller:ie-wlt-vl-ap-br-cl-eu:-:*:*:*:*:*:*:*", "matchCriteriaId": "23E4AE7D-CA1F-45FC-9D8F-725E71832D2A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weidmueller:ie-wl-vl-ap-br-cl-us_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C171799A-4FEE-43F4-A7EE-8B1A52828FF7", "versionEndIncluding": "1.16.18", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weidmueller:ie-wl-vl-ap-br-cl-us:-:*:*:*:*:*:*:*", "matchCriteriaId": "2DED5CF2-3B42-4D92-9647-AC54D07C6B20", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weidmueller:ie-wlt-vl-ap-br-cl-us_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AF79779D-863D-4B8B-A4B4-BFD0F3528442", "versionEndIncluding": "1.16.18", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weidmueller:ie-wlt-vl-ap-br-cl-us:-:*:*:*:*:*:*:*", "matchCriteriaId": "1209D9A9-D6AA-44C3-AD34-18C145851D5B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weidmueller:ie-wl-bl-ap-cl-eu_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F6210516-CB15-4099-B91E-63AE16C71B17", "versionEndIncluding": "1.11.10", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weidmueller:ie-wl-bl-ap-cl-eu:-:*:*:*:*:*:*:*", "matchCriteriaId": "26A4612B-2370-42CA-8EC4-5C74382ABDA6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weidmueller:ie-wlt-bl-ap-cl-eu_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "93C19C9E-99C5-4D4F-8FC6-9038B105F64A", "versionEndIncluding": "v1.11.10", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weidmueller:ie-wlt-bl-ap-cl-eu:-:*:*:*:*:*:*:*", "matchCriteriaId": "FC895FDA-C846-4885-AADB-DED6EC868C3B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weidmueller:ie-wl-bl-ap-cl-us_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E865089B-638A-491A-9527-EB1A21C9A3D9", "versionEndIncluding": "1.11.10", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weidmueller:ie-wl-bl-ap-cl-us:-:*:*:*:*:*:*:*", "matchCriteriaId": "97D7BBC3-6F43-47B5-81E2-431C8837BB3A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weidmueller:ie-wlt-bl-ap-cl-us_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2A3DCCA5-38A5-4661-8EA5-5DB21C92DA56", "versionEndIncluding": "1.11.10", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weidmueller:ie-wlt-bl-ap-cl-us:-:*:*:*:*:*:*:*", "matchCriteriaId": "6D38EC42-5C2E-4ACE-88A1-2890632E51DA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weidmueller:ie-wl-vl-ap-br-cl-eu_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B455D775-9B0E-4DCF-BDA6-0861F5C34362", "versionEndIncluding": "1.11.10", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weidmueller:ie-wl-vl-ap-br-cl-eu:-:*:*:*:*:*:*:*", "matchCriteriaId": "17790AD1-5DE3-47F4-A16C-67C7DFE56128", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weidmueller:ie-wlt-vl-ap-br-cl-eu_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EE88298B-D13E-4B19-8C77-15FB57FC4A9A", "versionEndIncluding": "1.11.10", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weidmueller:ie-wlt-vl-ap-br-cl-eu:-:*:*:*:*:*:*:*", "matchCriteriaId": "23E4AE7D-CA1F-45FC-9D8F-725E71832D2A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weidmueller:ie-wl-vl-ap-br-cl-us_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4D71C498-B58B-4FDC-AA9F-508D61F03E8B", "versionEndIncluding": "1.11.10", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weidmueller:ie-wl-vl-ap-br-cl-us:-:*:*:*:*:*:*:*", "matchCriteriaId": "2DED5CF2-3B42-4D92-9647-AC54D07C6B20", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:weidmueller:ie-wlt-vl-ap-br-cl-us_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "16DA2FEB-D762-44C1-9C45-3FC6017CE1D7", "versionEndIncluding": "1.11.10", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:weidmueller:ie-wlt-vl-ap-br-cl-us:-:*:*:*:*:*:*:*", "matchCriteriaId": "1209D9A9-D6AA-44C3-AD34-18C145851D5B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. A specially configured device hostname can cause the device to interpret selected remote traffic as local traffic, resulting in a bypass of web authentication. An attacker can send authenticated SNMP requests to trigger this vulnerability."}, {"lang": "es", "value": "En los dispositivos Weidmueller Industrial WLAN en m\u00faltiples versiones, se presenta una vulnerabilidad explotable de omisi\u00f3n de autenticaci\u00f3n en el procesamiento del nombre de host. Un nombre de host del dispositivo especialmente configurado puede causar al dispositivo interpretar el tr\u00e1fico remoto seleccionado como tr\u00e1fico local, resultando en una omisi\u00f3n de la autenticaci\u00f3n web. Un atacante puede enviar peticiones SNMP autenticadas para desencadenar esta vulnerabilidad"}], "id": "CVE-2021-33539", "lastModified": "2021-07-27T20:52:47.467", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "info@cert.vde.com", "type": "Secondary"}]}, "published": "2021-06-25T19:15:09.633", "references": [{"source": "info@cert.vde.com", "tags": ["Third Party Advisory"], "url": "https://cert.vde.com/en-us/advisories/vde-2021-026"}], "sourceIdentifier": "info@cert.vde.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "info@cert.vde.com", "type": "Primary"}]}

{}