CVE-2021-33539— WEIDMUELLER: WLAN devices affected by authentication bypass vulnerability
Quick assessment
Affected
Weidmüller IE-WL(T)-BL-AP-CL-XX
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Weidmueller Industrial WLAN devices是德国Weidmueller公司的一个工控WIAN。 Weidmueller Industrial WLAN 存在安全漏洞，该漏洞源于专门配置的设备主机名可能会导致设备将选定的远程流量解释为本地流量，从而绕过 Web 身份验证。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2021-33539
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WEIDMUELLER: WLAN devices affected by authentication bypass vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. A specially configured device hostname can cause the device to interpret selected remote traffic as local traffic, resulting in a bypass of web authentication. An attacker can send authenticated SNMP requests to trigger this vulnerability.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
认证机制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Weidmueller Industrial WLAN devices 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Weidmueller Industrial WLAN devices是德国Weidmueller公司的一个工控WIAN。 Weidmueller Industrial WLAN 存在安全漏洞，该漏洞源于专门配置的设备主机名可能会导致设备将选定的远程流量解释为本地流量，从而绕过 Web 身份验证。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Weidmüller | IE-WL(T)-BL-AP-CL-XX | IE-WL-BL-AP-CL-EU (2536600000) ~ V1.16.18 (Build 18081617) | - |
|
| Weidmüller | IE-WL(T)-VL-AP-CL-XX | IE-WL-VL-AP-BR-CL-EU (2536680000) ~ V1.11.10 (Build 18122616) | - |
|
II. Public POCs for CVE-2021-33539
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-33539
请登录查看更多情报信息。
Other References for CVE-2021-33539 (1)
-
https://cert.vde.com/en-us/advisories/vde-2021-026 x_refsource_CONFIRM
Same Patch Batch · Weidmüller · 2021-06-25 · 12 CVEs total
| CVE-2021-33528 | 8.8 HIGH | WEIDMUELLER: WLAN devices affected by privilege escalation vulnerability |
| CVE-2021-33530 | 8.8 HIGH | WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability |
| CVE-2021-33531 | 8.8 HIGH | WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability |
| CVE-2021-33532 | 8.8 HIGH | WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability |
| CVE-2021-33533 | 8.8 HIGH | WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability |
| CVE-2021-33535 | 8.8 HIGH | WEIDMUELLER: WLAN devices affected by exploitable format string vulnerability |
| CVE-2021-33537 | 8.8 HIGH | WEIDMUELLER: WLAN devices affected by Remote Code Execution (RCE) vulnerability |
| CVE-2021-33538 | 8.8 HIGH | WEIDMUELLER: WLAN devices affected by improper access control vulnerability |
| CVE-2021-33529 | 7.5 HIGH | WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability |
| CVE-2021-33536 | 7.5 HIGH | WEIDMUELLER: WLAN devices affected by Denial-of-Service vulnerability |
| CVE-2021-33534 | 7.2 HIGH | WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability |
IV. Related Vulnerabilities
Same product: IE-WL(T)-BL-AP-CL-XX
-
CVE-2021-33538
WEIDMUELLER: WLAN devices affected by improper access contro -
CVE-2021-33537
WEIDMUELLER: WLAN devices affected by Remote Code Execution -
CVE-2021-33536
WEIDMUELLER: WLAN devices affected by Denial-of-Service vuln -
CVE-2021-33535
WEIDMUELLER: WLAN devices affected by exploitable format str -
CVE-2021-33534
WEIDMUELLER: WLAN devices affected by OS Command Injection v
Same vendor: Weidmüller
-
CVE-2021-33538
WEIDMUELLER: WLAN devices affected by improper access contro -
CVE-2021-33537
WEIDMUELLER: WLAN devices affected by Remote Code Execution -
CVE-2021-33536
WEIDMUELLER: WLAN devices affected by Denial-of-Service vuln -
CVE-2021-33535
WEIDMUELLER: WLAN devices affected by exploitable format str -
CVE-2021-33534
WEIDMUELLER: WLAN devices affected by OS Command Injection v
Same weakness: CWE-287
-
CVE-2026-78885
liketrek TREK OIDC Service oidcService.ts findOrCreateUser i -
CVE-2026-78863
liketrek TREK Pre-2FA mfa_token authService.ts loginUser imp -
CVE-2026-53561
Apache Hive: Unauthenticated authentication bypass in HiveSe -
CVE-2026-65633
Purpose-limited JWT accepted as full bearer authentication i -
CVE-2026-77567
Filament: App-based MFA can be bypassed when recovery codes
V. Comments for CVE-2021-33539
No comments yet