CVE-2021-33529— WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability
Quick assessment
Affected
Weidmüller IE-WL(T)-BL-AP-CL-XX
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Weidmueller Industrial WLAN devices是德国Weidmueller公司的一个工控WIAN。 Weidmueller Industrial WLAN 存在安全漏洞，该漏洞源于在服务代理二进制中使用硬编码的密钥，允许通过网络解密从设备或到设备的捕获流量。
Possible ATT&CK Techniques 3 AI
T1557 · Adversary-in-the-Middle T1530 · Data from Cloud Storage T1552 · Unsecured Credentials
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2021-33529
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
In Weidmueller Industrial WLAN devices in multiple versions the usage of hard-coded cryptographic keys within the service agent binary allows for the decryption of captured traffic across the network from or to the device.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
使用硬编码的凭证
Source: CVE Program / CVE List V5
Vulnerability Title
Weidmueller Industrial WLAN 信任管理问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Weidmueller Industrial WLAN devices是德国Weidmueller公司的一个工控WIAN。 Weidmueller Industrial WLAN 存在安全漏洞，该漏洞源于在服务代理二进制中使用硬编码的密钥，允许通过网络解密从设备或到设备的捕获流量。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Weidmüller | IE-WL(T)-BL-AP-CL-XX | IE-WL-BL-AP-CL-EU (2536600000) ~ V1.16.18 (Build 18081617) | - |
|
| Weidmüller | IE-WL(T)-VL-AP-CL-XX | IE-WL-VL-AP-BR-CL-EU (2536680000) ~ V1.11.10 (Build 18122616) | - |
|
II. Public POCs for CVE-2021-33529
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-33529
请登录查看更多情报信息。
Other References for CVE-2021-33529 (1)
-
https://cert.vde.com/en-us/advisories/vde-2021-026 x_refsource_CONFIRM
Same Patch Batch · Weidmüller · 2021-06-25 · 12 CVEs total
| CVE-2021-33528 | 8.8 HIGH | WEIDMUELLER: WLAN devices affected by privilege escalation vulnerability |
| CVE-2021-33530 | 8.8 HIGH | WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability |
| CVE-2021-33531 | 8.8 HIGH | WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability |
| CVE-2021-33532 | 8.8 HIGH | WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability |
| CVE-2021-33533 | 8.8 HIGH | WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability |
| CVE-2021-33535 | 8.8 HIGH | WEIDMUELLER: WLAN devices affected by exploitable format string vulnerability |
| CVE-2021-33537 | 8.8 HIGH | WEIDMUELLER: WLAN devices affected by Remote Code Execution (RCE) vulnerability |
| CVE-2021-33538 | 8.8 HIGH | WEIDMUELLER: WLAN devices affected by improper access control vulnerability |
| CVE-2021-33536 | 7.5 HIGH | WEIDMUELLER: WLAN devices affected by Denial-of-Service vulnerability |
| CVE-2021-33534 | 7.2 HIGH | WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability |
| CVE-2021-33539 | 7.2 HIGH | WEIDMUELLER: WLAN devices affected by authentication bypass vulnerability |
IV. Related Vulnerabilities
Same product: IE-WL(T)-BL-AP-CL-XX
-
CVE-2021-33539
WEIDMUELLER: WLAN devices affected by authentication bypass -
CVE-2021-33538
WEIDMUELLER: WLAN devices affected by improper access contro -
CVE-2021-33537
WEIDMUELLER: WLAN devices affected by Remote Code Execution -
CVE-2021-33536
WEIDMUELLER: WLAN devices affected by Denial-of-Service vuln -
CVE-2021-33535
WEIDMUELLER: WLAN devices affected by exploitable format str
Same vendor: Weidmüller
-
CVE-2021-33539
WEIDMUELLER: WLAN devices affected by authentication bypass -
CVE-2021-33538
WEIDMUELLER: WLAN devices affected by improper access contro -
CVE-2021-33537
WEIDMUELLER: WLAN devices affected by Remote Code Execution -
CVE-2021-33536
WEIDMUELLER: WLAN devices affected by Denial-of-Service vuln -
CVE-2021-33535
WEIDMUELLER: WLAN devices affected by exploitable format str
Same weakness: CWE-798
-
CVE-2026-78062
vas3k TaxHacker JWT Secret config.ts envSchema.parse hard-co -
CVE-2026-76131
Yamaha VOCALOID6 硬编码凭据漏洞 -
CVE-2026-76392
Use of Hard-coded Credentials in Container Connections in Sp -
CVE-2026-71960
Cudy WR3000 2.0 Hard-coded JWT Secret Authentication Bypass -
CVE-2026-74893
openssl_encrypt before 1.4.0 JWT Token Forgery via Hardcoded
V. Comments for CVE-2021-33529
No comments yet