Security Advisory

CVE-2021-33539

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-06-25 18:26:03
Last updated 2024-09-16 17:43:21
Assigner CERTVDE
State PUBLISHED

Description

In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. A specially configured device hostname can cause the device to interpret selected remote traffic as local traffic, resulting in a bypass of web authentication. An attacker can send authenticated SNMP requests to trigger this vulnerability.