Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-33535
Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
WEIDMUELLER: WLAN devices affected by exploitable format string vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
In Weidmueller Industrial WLAN devices in multiple versions an exploitable format string vulnerability exists in the iw_console conio_writestr functionality. A specially crafted time server entry can cause an overflow of the time server buffer, resulting in remote code execution. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用外部控制的格式字符串
Source: NVD (National Vulnerability Database)
Vulnerability Title
Weidmueller Industrial WLAN 格式化字符串错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Weidmueller Industrial WLAN devices是德国Weidmueller公司的一个工控WIAN。 Weidmueller Industrial WLAN 存在格式化字符串错误漏洞,该漏洞源于特制的时间服务器条目可能会导致时间服务器缓冲区溢出,从而导致远程代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
WeidmüllerIE-WL(T)-BL-AP-CL-XX IE-WL-BL-AP-CL-EU (2536600000) ~ V1.16.18 (Build 18081617) -
WeidmüllerIE-WL(T)-VL-AP-CL-XX IE-WL-VL-AP-BR-CL-EU (2536680000) ~ V1.11.10 (Build 18122616) -
II. Public POCs for CVE-2021-33535
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2021-33535
Please Login to view more intelligence information
IV. Related Vulnerabilities
V. Comments for CVE-2021-33535

No comments yet


Leave a comment