Beveiligingsadvies

CVE-2021-33539

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-06-25 18:26:03
Laatst bijgewerkt 2024-09-16 17:43:21
Toegewezen door CERTVDE
CVSS-score 7.2
Status PUBLISHED

Beschrijving

In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. A specially configured device hostname can cause the device to interpret selected remote traffic as local traffic, resulting in a bypass of web authentication. An attacker can send authenticated SNMP requests to trigger this vulnerability.