CVE-2021-33529

WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability

State: Published
Severity: 7.5 High
Published: Jun 25, 2021
Updated: Sep 16, 2024
Reserved: May 24, 2021

Description

In Weidmueller Industrial WLAN devices in multiple versions the usage of hard-coded cryptographic keys within the service agent binary allows for the decryption of captured traffic across the network from or to the device.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	CERTVDE

Weaknesses

CWE-798 Use of Hard-coded Credentials

Affected Products

Product	Versions
IE-WL(T)-BL-AP-CL-XXWeidmüller	IE-WL-BL-AP-CL-EU (2536600000) through V1.16.18 (Build 18081617)Affected IE-WLT-BL-AP-CL-EU (2536650000) through V1.16.18 (Build 18081617)Affected IE-WL-BL-AP-CL-US (2536660000) through V1.16.18 (Build 18081617)Affected IE-WLT-BL-AP-CL-US (2536670000) through V1.16.18 (Build 18081617)Affected
IE-WL(T)-VL-AP-CL-XXWeidmüller	IE-WL-VL-AP-BR-CL-EU (2536680000) through V1.11.10 (Build 18122616)Affected IE-WLT-VL-AP-BR-CL-EU (2536690000) through V1.11.10 (Build 18122616)Affected IE-WL-VL-AP-BR-CL-US (2536700000) through V1.11.10 (Build 18122616)Affected IE-WLT-VL-AP-BR-CL-US (2536710000) through V1.11.10 (Build 18122616)Affected

References

https://cert.vde.com/en-us/advisories/vde-2021-026

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.