VDE-2025-044

Vulnerability from csaf_weidmuellerinterfacegmbhcokg - Published: 2025-05-27 09:00 - Updated: 2025-08-27 10:00
Summary
Weidmueller: Industrial ethernet switches are affected by multiple vulnerabilities
Severity
Critical
Notes
Summary: Weidmueller industrial ethernet switches are affected by multiple vulnerabilities. Weidmueller has released new firmwares of the affected products to fix the vulnerabilities.
General Recommendation: As a general security measure, Weidmueller strongly recommends minimizing network exposure of products. Limit access to trusted networks by using appropriate mechanisms.
Impact: Weidmueller industrial ethernet switches are vulnerable to multiple vulnerabilities. The security of the devices may be compromised. Further information can be found under vulnerability details.
Remediation: Update to the new version as listed in the following table: | Product | Affected Version | Fixed Version | |----------------------------------|------------------|---------------| | IE-SW-VL05M-5TX | <V3.6.32 | V3.6.32 | | IE-SW-VL05MT-5TX | <V3.6.32 | V3.6.32 | | IE-SW-VL08MT-8TX | <V3.5.36 | V3.5.36 | | IE-SW-VL08MT-5TX-1SC-2SCS | <V3.5.36 | V3.5.36 | | IE-SW-VL08MT-6TX-2SC | <V3.5.36 | V3.5.36 | | IE-SW-VL08MT-6TX-2ST | <V3.5.36 | V3.5.36 | | IE-SW-VL08MT-6TX-2SCS | <V3.5.36 | V3.5.36 | | IE-SW-PL10M-3GT-7TX | <V3.3.34 | V3.3.34 | | IE-SW-PL10MT-3GT-7TX | <V3.3.34 | V3.3.34 | | IE-SW-PL16M-16TX | <V3.4.32 | V3.4.32 | | IE-SW-PL16MT-16TX | <V3.4.32 | V3.4.32 | | IE-SW-PL18M-2GC-16TX | <V3.4.40 | V3.4.40 | | IE-SW-PL18MT-2GC-16TX | <V3.4.40 | V3.4.40 |
CVE-2025-41649

An unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer, potentially leading to a denial-of-service condition for the devices.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-787 - Out-of-bounds Write
Affected products
Product Identifier Version Remediation
Unresolved product id: CSAFPID-31024 —
Vendor Fix
Unresolved product id: CSAFPID-31025 —
Vendor Fix
Unresolved product id: CSAFPID-31026 —
Vendor Fix
Unresolved product id: CSAFPID-31027 —
Vendor Fix
Unresolved product id: CSAFPID-31028 —
Vendor Fix
Unresolved product id: CSAFPID-31029 —
Vendor Fix
Unresolved product id: CSAFPID-31030 —
Vendor Fix
Unresolved product id: CSAFPID-31031 —
Vendor Fix
Unresolved product id: CSAFPID-31032 —
Vendor Fix
Unresolved product id: CSAFPID-31033 —
Vendor Fix
Unresolved product id: CSAFPID-31034 —
Vendor Fix
Unresolved product id: CSAFPID-31035 —
Vendor Fix
Unresolved product id: CSAFPID-31036 —
Vendor Fix
Product Identifier Version Remediation
Unresolved product id: CSAFPID-32037 —
Unresolved product id: CSAFPID-32038 —
Unresolved product id: CSAFPID-32039 —
Unresolved product id: CSAFPID-32040 —
Unresolved product id: CSAFPID-32041 —
Unresolved product id: CSAFPID-32042 —
Unresolved product id: CSAFPID-32043 —
Unresolved product id: CSAFPID-32044 —
Unresolved product id: CSAFPID-32045 —
Unresolved product id: CSAFPID-32046 —
Unresolved product id: CSAFPID-32047 —
Unresolved product id: CSAFPID-32048 —
Unresolved product id: CSAFPID-32049 —
CVE-2025-41650

An unauthenticated remote attacker can exploit input validation in cmd services of the devices, allowing them to disrupt system operations and potentially cause a denial-of-service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1287 - Improper Validation of Specified Type of Input
Affected products
Known affected 13 products, the same list as for CVE-2025-41649
Fixed 13 products, the same list as for CVE-2025-41649
CVE-2025-41651

Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise.

9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-306 - Missing Authentication for Critical Function
Affected products
Known affected 13 products, the same list as for CVE-2025-41649
Fixed 13 products, the same list as for CVE-2025-41649
CVE-2025-41652

The devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism. An unauthenticated remote attacker could exploit this weakness by performing brute-force attacks to guess valid credentials or by using MD5 collision techniques to forge authentication hashes, potentially compromising the device.

9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-328 - Use of Weak Hash
Affected products
Known affected 13 products, the same list as for CVE-2025-41649
Fixed 13 products, the same list as for CVE-2025-41649
CVE-2025-41653

An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicious header, potentially causing the server to crash or become unresponsive.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-410 - Insufficient Resource Pool
Affected products
Known affected 13 products, the same list as for CVE-2025-41649
Fixed 13 products, the same list as for CVE-2025-41649
References
Acknowledgments
CERT@VDE certvde.com
To clipboard 

{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.first.org/cvss/v3.1/specification-document",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "Weidmueller industrial ethernet switches are affected by multiple vulnerabilities.\n\nWeidmueller has released new firmwares of the affected products to fix the vulnerabilities.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure, Weidmueller strongly recommends minimizing network exposure of products. Limit access to trusted networks by using appropriate mechanisms. ",
        "title": "General Recommendation"
      },
      {
        "category": "description",
        "text": "Weidmueller industrial ethernet switches are vulnerable to multiple vulnerabilities. The security of the devices may be compromised. Further information can be found under vulnerability details.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "Update to the new version as listed in the following table:\n| Product                          | Affected Version | Fixed Version |\n|----------------------------------|------------------|---------------|\n| IE-SW-VL05M-5TX                  | \u003cV3.6.32         | V3.6.32       |\n| IE-SW-VL05MT-5TX                 | \u003cV3.6.32         | V3.6.32       |\n| IE-SW-VL08MT-8TX                 | \u003cV3.5.36         | V3.5.36       |\n| IE-SW-VL08MT-5TX-1SC-2SCS        | \u003cV3.5.36         | V3.5.36       |\n| IE-SW-VL08MT-6TX-2SC             | \u003cV3.5.36         | V3.5.36       |\n| IE-SW-VL08MT-6TX-2ST             | \u003cV3.5.36         | V3.5.36       |\n| IE-SW-VL08MT-6TX-2SCS            | \u003cV3.5.36         | V3.5.36       |\n| IE-SW-PL10M-3GT-7TX              | \u003cV3.3.34         | V3.3.34       |\n| IE-SW-PL10MT-3GT-7TX             | \u003cV3.3.34         | V3.3.34       |\n| IE-SW-PL16M-16TX                 | \u003cV3.4.32         | V3.4.32       |\n| IE-SW-PL16MT-16TX                | \u003cV3.4.32         | V3.4.32       |\n| IE-SW-PL18M-2GC-16TX             | \u003cV3.4.40         | V3.4.40       |\n| IE-SW-PL18MT-2GC-16TX            | \u003cV3.4.40         | V3.4.40       |\n",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "psirt@weidmueller.com",
      "name": "Weidmueller Interface GmbH \u0026 Co. KG",
      "namespace": "https://www.weidmueller.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "Weidmueller Security Advisory Board",
        "url": "https://support.weidmueller.com/support-center/popular-resources/security-advisory-board"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for Weidmueller",
        "url": "https://certvde.com/de/advisories/vendor/weidmueller/"
      },
      {
        "category": "self",
        "summary": "VDE-2025-044: Weidmueller: Industrial ethernet switches are affected by multiple vulnerabilities - HTML",
        "url": "https://certvde.com/de/advisories/VDE-2025-044"
      },
      {
        "category": "self",
        "summary": "VDE-2025-044: Weidmueller: Industrial ethernet switches are affected by multiple vulnerabilities - CSAF",
        "url": "https://weidmueller.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-044.json"
      }
    ],
    "title": "Weidmueller: Industrial ethernet switches are affected by multiple vulnerabilities",
    "tracking": {
      "aliases": [
        "VDE-2025-044",
        "WMSA-2500001"
      ],
      "current_release_date": "2025-08-27T10:00:00.000Z",
      "generator": {
        "date": "2025-08-28T07:36:09.121Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.34"
        }
      },
      "id": "VDE-2025-044",
      "initial_release_date": "2025-05-27T09:00:00.000Z",
      "revision_history": [
        {
          "date": "2025-05-27T09:00:00.000Z",
          "number": "1.0.0",
          "summary": "Initial version"
        },
        {
          "date": "2025-08-27T10:00:00.000Z",
          "number": "1.1.0",
          "summary": "Update: CWE from CVE-2025-41652, Revision History"
        }
      ],
      "status": "final",
      "version": "1.1.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "IE-SW-VL05M-5TX",
                "product": {
                  "name": "IE-SW-VL05M-5TX",
                  "product_id": "CSAFPID-0001",
                  "product_identification_helper": {
                    "model_numbers": [
                      "1504280000"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IE-SW-VL05MT-5TX",
                "product": {
                  "name": "IE-SW-VL05MT-5TX",
                  "product_id": "CSAFPID-0002",
                  "product_identification_helper": {
                    "model_numbers": [
                      "1504310000"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IE-SW-VL08MT-8TX",
                "product": {
                  "name": "IE-SW-VL08MT-8TX",
                  "product_id": "CSAFPID-0003",
                  "product_identification_helper": {
                    "model_numbers": [
                      "1240940000"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IE-SW-VL08MT-5TX-1SC-2SCS",
                "product": {
                  "name": "IE-SW-VL08MT-5TX-1SC-2SCS",
                  "product_id": "CSAFPID-0004",
                  "product_identification_helper": {
                    "model_numbers": [
                      "1345240000"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IE-SW-VL08MT-6TX-2SC",
                "product": {
                  "name": "IE-SW-VL08MT-6TX-2SC",
                  "product_id": "CSAFPID-0005",
                  "product_identification_helper": {
                    "model_numbers": [
                      "1344770000"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IE-SW-VL08MT-6TX-2ST",
                "product": {
                  "name": "IE-SW-VL08MT-6TX-2ST",
                  "product_id": "CSAFPID-0006",
                  "product_identification_helper": {
                    "model_numbers": [
                      "1240990000"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IE-SW-VL08MT-6TX-2SCS",
                "product": {
                  "name": "IE-SW-VL08MT-6TX-2SCS",
                  "product_id": "CSAFPID-0007",
                  "product_identification_helper": {
                    "model_numbers": [
                      "1241020000"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IE-SW-PL10M-3GT-7TX",
                "product": {
                  "name": "IE-SW-PL10M-3GT-7TX",
                  "product_id": "CSAFPID-0008",
                  "product_identification_helper": {
                    "model_numbers": [
                      "1241290000"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IE-SW-PL10MT-3GT-7TX",
                "product": {
                  "name": "IE-SW-PL10MT-3GT-7TX",
                  "product_id": "CSAFPID-0009",
                  "product_identification_helper": {
                    "model_numbers": [
                      "1286930000"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IE-SW-PL16M-16TX",
                "product": {
                  "name": "IE-SW-PL16M-16TX",
                  "product_id": "CSAFPID-0010",
                  "product_identification_helper": {
                    "model_numbers": [
                      "1241100000"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IE-SW-PL16MT-16TX",
                "product": {
                  "name": "IE-SW-PL16MT-16TX",
                  "product_id": "CSAFPID-0011",
                  "product_identification_helper": {
                    "model_numbers": [
                      "1286820000"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IE-SW-PL18M-2GC-16TX",
                "product": {
                  "name": "IE-SW-PL18M-2GC-16TX",
                  "product_id": "CSAFPID-0012",
                  "product_identification_helper": {
                    "model_numbers": [
                      "1241320000"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IE-SW-PL18MT-2GC-16TX",
                "product": {
                  "name": "IE-SW-PL18MT-2GC-16TX",
                  "product_id": "CSAFPID-0013",
                  "product_identification_helper": {
                    "model_numbers": [
                      "1286970000"
                    ]
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Hardware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.6.32",
                "product": {
                  "name": "Firmware \u003cV3.6.32",
                  "product_id": "CSAFPID-21014"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cV3.5.36",
                "product": {
                  "name": "Firmware \u003cV3.5.36",
                  "product_id": "CSAFPID-21015"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cV3.3.34",
                "product": {
                  "name": "Firmware \u003cV3.3.34",
                  "product_id": "CSAFPID-21016"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cV3.4.32",
                "product": {
                  "name": "Firmware \u003cV3.4.32",
                  "product_id": "CSAFPID-21017"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cV3.4.40",
                "product": {
                  "name": "Firmware \u003cV3.4.40",
                  "product_id": "CSAFPID-21018"
                }
              },
              {
                "category": "product_version",
                "name": "V3.6.32",
                "product": {
                  "name": "Firmware V3.6.30",
                  "product_id": "CSAFPID-22019"
                }
              },
              {
                "category": "product_version",
                "name": "V3.5.36",
                "product": {
                  "name": "Firmware V3.5.34",
                  "product_id": "CSAFPID-22020"
                }
              },
              {
                "category": "product_version",
                "name": "V3.3.34",
                "product": {
                  "name": "Firmware V3.3.32",
                  "product_id": "CSAFPID-22021"
                }
              },
              {
                "category": "product_version",
                "name": "V3.4.32",
                "product": {
                  "name": "Firmware V3.4.30",
                  "product_id": "CSAFPID-22022"
                }
              },
              {
                "category": "product_version",
                "name": "V3.4.40",
                "product": {
                  "name": "Firmware V3.4.38",
                  "product_id": "CSAFPID-22023"
                }
              }
            ],
            "category": "product_family",
            "name": "Firmware"
          }
        ],
        "category": "vendor",
        "name": "Weidmueller"
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-31024",
          "CSAFPID-31025",
          "CSAFPID-31026",
          "CSAFPID-31027",
          "CSAFPID-31028",
          "CSAFPID-31029",
          "CSAFPID-31030",
          "CSAFPID-31031",
          "CSAFPID-31032",
          "CSAFPID-31033",
          "CSAFPID-31034",
          "CSAFPID-31035",
          "CSAFPID-31036"
        ],
        "summary": "Affected products."
      },
      {
        "group_id": "CSAFGID-0002",
        "product_ids": [
          "CSAFPID-32037",
          "CSAFPID-32038",
          "CSAFPID-32039",
          "CSAFPID-32040",
          "CSAFPID-32041",
          "CSAFPID-32042",
          "CSAFPID-32043",
          "CSAFPID-32044",
          "CSAFPID-32045",
          "CSAFPID-32046",
          "CSAFPID-32047",
          "CSAFPID-32048",
          "CSAFPID-32049"
        ],
        "summary": "Fixed products."
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003cV3.6.32 installed on IE-SW-VL05M-5TX",
          "product_id": "CSAFPID-31024"
        },
        "product_reference": "CSAFPID-21014",
        "relates_to_product_reference": "CSAFPID-0001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003cV3.6.32 installed on IE-SW-VL05MT-5TX",
          "product_id": "CSAFPID-31025"
        },
        "product_reference": "CSAFPID-21014",
        "relates_to_product_reference": "CSAFPID-0002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003cV3.5.36 installed on IE-SW-VL08MT-8TX",
          "product_id": "CSAFPID-31026"
        },
        "product_reference": "CSAFPID-21015",
        "relates_to_product_reference": "CSAFPID-0003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003cV3.5.36 installed on IE-SW-VL08MT-5TX-1SC-2SCS",
          "product_id": "CSAFPID-31027"
        },
        "product_reference": "CSAFPID-21015",
        "relates_to_product_reference": "CSAFPID-0004"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003cV3.5.36 installed on IE-SW-VL08MT-6TX-2SC",
          "product_id": "CSAFPID-31028"
        },
        "product_reference": "CSAFPID-21015",
        "relates_to_product_reference": "CSAFPID-0005"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003cV3.5.36 installed on IE-SW-VL08MT-6TX-2ST",
          "product_id": "CSAFPID-31029"
        },
        "product_reference": "CSAFPID-21015",
        "relates_to_product_reference": "CSAFPID-0006"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003cV3.5.36 installed on IE-SW-VL08MT-6TX-2SCS",
          "product_id": "CSAFPID-31030"
        },
        "product_reference": "CSAFPID-21015",
        "relates_to_product_reference": "CSAFPID-0007"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003cV3.3.34 installed on IE-SW-PL10M-3GT-7TX",
          "product_id": "CSAFPID-31031"
        },
        "product_reference": "CSAFPID-21016",
        "relates_to_product_reference": "CSAFPID-0008"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003cV3.3.34 installed on IE-SW-PL10MT-3GT-7TX",
          "product_id": "CSAFPID-31032"
        },
        "product_reference": "CSAFPID-21016",
        "relates_to_product_reference": "CSAFPID-0009"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003cV3.4.32 installed on IE-SW-PL16M-16TX",
          "product_id": "CSAFPID-31033"
        },
        "product_reference": "CSAFPID-21017",
        "relates_to_product_reference": "CSAFPID-0010"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003cV3.4.32 installed on IE-SW-PL16MT-16TX",
          "product_id": "CSAFPID-31034"
        },
        "product_reference": "CSAFPID-21017",
        "relates_to_product_reference": "CSAFPID-0011"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003cV3.4.40 installed on IE-SW-PL18M-2GC-16TX",
          "product_id": "CSAFPID-31035"
        },
        "product_reference": "CSAFPID-21018",
        "relates_to_product_reference": "CSAFPID-0012"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware \u003cV3.4.40 installed on IE-SW-PL18MT-2GC-16TX",
          "product_id": "CSAFPID-31036"
        },
        "product_reference": "CSAFPID-21018",
        "relates_to_product_reference": "CSAFPID-0013"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware V3.6.32 installed on IE-SW-VL05M-5TX",
          "product_id": "CSAFPID-32037"
        },
        "product_reference": "CSAFPID-22019",
        "relates_to_product_reference": "CSAFPID-0001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware V3.6.32 installed on IE-SW-VL05MT-5TX",
          "product_id": "CSAFPID-32038"
        },
        "product_reference": "CSAFPID-22019",
        "relates_to_product_reference": "CSAFPID-0002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware V3.5.36 installed on IE-SW-VL08MT-8TX",
          "product_id": "CSAFPID-32039"
        },
        "product_reference": "CSAFPID-22020",
        "relates_to_product_reference": "CSAFPID-0003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware V3.5.36 installed on IE-SW-VL08MT-5TX-1SC-2SCS",
          "product_id": "CSAFPID-32040"
        },
        "product_reference": "CSAFPID-22020",
        "relates_to_product_reference": "CSAFPID-0004"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware V3.5.36 installed on IE-SW-VL08MT-6TX-2SC",
          "product_id": "CSAFPID-32041"
        },
        "product_reference": "CSAFPID-22020",
        "relates_to_product_reference": "CSAFPID-0005"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware V3.5.36 installed on IE-SW-VL08MT-6TX-2ST",
          "product_id": "CSAFPID-32042"
        },
        "product_reference": "CSAFPID-22020",
        "relates_to_product_reference": "CSAFPID-0006"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware V3.5.36 installed on IE-SW-VL08MT-6TX-2SCS",
          "product_id": "CSAFPID-32043"
        },
        "product_reference": "CSAFPID-22020",
        "relates_to_product_reference": "CSAFPID-0007"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware V3.3.34 installed on IE-SW-PL10M-3GT-7TX",
          "product_id": "CSAFPID-32044"
        },
        "product_reference": "CSAFPID-22021",
        "relates_to_product_reference": "CSAFPID-0008"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware V3.3.34 installed on IE-SW-PL10MT-3GT-7TX",
          "product_id": "CSAFPID-32045"
        },
        "product_reference": "CSAFPID-22021",
        "relates_to_product_reference": "CSAFPID-0009"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware V3.4.32 installed on IE-SW-PL16M-16TX",
          "product_id": "CSAFPID-32046"
        },
        "product_reference": "CSAFPID-22022",
        "relates_to_product_reference": "CSAFPID-0010"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware V3.4.32 installed on IE-SW-PL16MT-16TX",
          "product_id": "CSAFPID-32047"
        },
        "product_reference": "CSAFPID-22022",
        "relates_to_product_reference": "CSAFPID-0011"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware V3.4.40 installed on IE-SW-PL18M-2GC-16TX",
          "product_id": "CSAFPID-32048"
        },
        "product_reference": "CSAFPID-22023",
        "relates_to_product_reference": "CSAFPID-0012"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware V3.4.40 installed on IE-SW-PL18MT-2GC-16TX",
          "product_id": "CSAFPID-32049"
        },
        "product_reference": "CSAFPID-22023",
        "relates_to_product_reference": "CSAFPID-0013"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-41649",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "An unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer, potentially leading to a denial-of-service condition for the devices.",
          "title": "Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32037",
          "CSAFPID-32038",
          "CSAFPID-32039",
          "CSAFPID-32040",
          "CSAFPID-32041",
          "CSAFPID-32042",
          "CSAFPID-32043",
          "CSAFPID-32044",
          "CSAFPID-32045",
          "CSAFPID-32046",
          "CSAFPID-32047",
          "CSAFPID-32048",
          "CSAFPID-32049"
        ],
        "known_affected": [
          "CSAFPID-31024",
          "CSAFPID-31025",
          "CSAFPID-31026",
          "CSAFPID-31027",
          "CSAFPID-31028",
          "CSAFPID-31029",
          "CSAFPID-31030",
          "CSAFPID-31031",
          "CSAFPID-31032",
          "CSAFPID-31033",
          "CSAFPID-31034",
          "CSAFPID-31035",
          "CSAFPID-31036"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.6.32",
          "product_ids": [
            "CSAFPID-31024",
            "CSAFPID-31025"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.5.36",
          "product_ids": [
            "CSAFPID-31026",
            "CSAFPID-31027",
            "CSAFPID-31028",
            "CSAFPID-31029",
            "CSAFPID-31030"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.3.34",
          "product_ids": [
            "CSAFPID-31031",
            "CSAFPID-31032"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.4.32",
          "product_ids": [
            "CSAFPID-31033",
            "CSAFPID-31034"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.4.40",
          "product_ids": [
            "CSAFPID-31035",
            "CSAFPID-31036"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31024",
            "CSAFPID-31025",
            "CSAFPID-31026",
            "CSAFPID-31027",
            "CSAFPID-31028",
            "CSAFPID-31029",
            "CSAFPID-31030",
            "CSAFPID-31031",
            "CSAFPID-31032",
            "CSAFPID-31033",
            "CSAFPID-31034",
            "CSAFPID-31035",
            "CSAFPID-31036"
          ]
        }
      ],
      "title": "CVE-2025-41649"
    },
    {
      "cve": "CVE-2025-41650",
      "cwe": {
        "id": "CWE-1287",
        "name": "Improper Validation of Specified Type of Input"
      },
      "notes": [
        {
          "category": "description",
          "text": "An unauthenticated remote attacker can exploit input validation in cmd services of the devices, allowing them to disrupt system operations and potentially cause a denial-of-service.",
          "title": "Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32037",
          "CSAFPID-32038",
          "CSAFPID-32039",
          "CSAFPID-32040",
          "CSAFPID-32041",
          "CSAFPID-32042",
          "CSAFPID-32043",
          "CSAFPID-32044",
          "CSAFPID-32045",
          "CSAFPID-32046",
          "CSAFPID-32047",
          "CSAFPID-32048",
          "CSAFPID-32049"
        ],
        "known_affected": [
          "CSAFPID-31024",
          "CSAFPID-31025",
          "CSAFPID-31026",
          "CSAFPID-31027",
          "CSAFPID-31028",
          "CSAFPID-31029",
          "CSAFPID-31030",
          "CSAFPID-31031",
          "CSAFPID-31032",
          "CSAFPID-31033",
          "CSAFPID-31034",
          "CSAFPID-31035",
          "CSAFPID-31036"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.6.32",
          "product_ids": [
            "CSAFPID-31024",
            "CSAFPID-31025"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.5.36",
          "product_ids": [
            "CSAFPID-31026",
            "CSAFPID-31027",
            "CSAFPID-31028",
            "CSAFPID-31029",
            "CSAFPID-31030"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.3.34",
          "product_ids": [
            "CSAFPID-31031",
            "CSAFPID-31032"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.4.32",
          "product_ids": [
            "CSAFPID-31033",
            "CSAFPID-31034"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.4.40",
          "product_ids": [
            "CSAFPID-31035",
            "CSAFPID-31036"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31024",
            "CSAFPID-31025",
            "CSAFPID-31026",
            "CSAFPID-31027",
            "CSAFPID-31028",
            "CSAFPID-31029",
            "CSAFPID-31030",
            "CSAFPID-31031",
            "CSAFPID-31032",
            "CSAFPID-31033",
            "CSAFPID-31034",
            "CSAFPID-31035",
            "CSAFPID-31036"
          ]
        }
      ],
      "title": "CVE-2025-41650"
    },
    {
      "cve": "CVE-2025-41651",
      "cwe": {
        "id": "CWE-306",
        "name": "Missing Authentication for Critical Function"
      },
      "notes": [
        {
          "category": "description",
          "text": "Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise.",
          "title": "Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32037",
          "CSAFPID-32038",
          "CSAFPID-32039",
          "CSAFPID-32040",
          "CSAFPID-32041",
          "CSAFPID-32042",
          "CSAFPID-32043",
          "CSAFPID-32044",
          "CSAFPID-32045",
          "CSAFPID-32046",
          "CSAFPID-32047",
          "CSAFPID-32048",
          "CSAFPID-32049"
        ],
        "known_affected": [
          "CSAFPID-31024",
          "CSAFPID-31025",
          "CSAFPID-31026",
          "CSAFPID-31027",
          "CSAFPID-31028",
          "CSAFPID-31029",
          "CSAFPID-31030",
          "CSAFPID-31031",
          "CSAFPID-31032",
          "CSAFPID-31033",
          "CSAFPID-31034",
          "CSAFPID-31035",
          "CSAFPID-31036"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.6.32",
          "product_ids": [
            "CSAFPID-31024",
            "CSAFPID-31025"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.5.36",
          "product_ids": [
            "CSAFPID-31026",
            "CSAFPID-31027",
            "CSAFPID-31028",
            "CSAFPID-31029",
            "CSAFPID-31030"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.3.34",
          "product_ids": [
            "CSAFPID-31031",
            "CSAFPID-31032"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.4.32",
          "product_ids": [
            "CSAFPID-31033",
            "CSAFPID-31034"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.4.40",
          "product_ids": [
            "CSAFPID-31035",
            "CSAFPID-31036"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 9.8,
            "environmentalSeverity": "CRITICAL",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 9.8,
            "temporalSeverity": "CRITICAL",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31024",
            "CSAFPID-31025",
            "CSAFPID-31026",
            "CSAFPID-31027",
            "CSAFPID-31028",
            "CSAFPID-31029",
            "CSAFPID-31030",
            "CSAFPID-31031",
            "CSAFPID-31032",
            "CSAFPID-31033",
            "CSAFPID-31034",
            "CSAFPID-31035",
            "CSAFPID-31036"
          ]
        }
      ],
      "title": "CVE-2025-41651"
    },
    {
      "cve": "CVE-2025-41652",
      "cwe": {
        "id": "CWE-328",
        "name": "Use of Weak Hash"
      },
      "notes": [
        {
          "category": "description",
          "text": "The devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism. An unauthenticated remote attacker could exploit this weakness by performing brute-force attacks to guess valid credentials or by using MD5 collision techniques to forge authentication hashes, potentially compromising the device.",
          "title": "Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32037",
          "CSAFPID-32038",
          "CSAFPID-32039",
          "CSAFPID-32040",
          "CSAFPID-32041",
          "CSAFPID-32042",
          "CSAFPID-32043",
          "CSAFPID-32044",
          "CSAFPID-32045",
          "CSAFPID-32046",
          "CSAFPID-32047",
          "CSAFPID-32048",
          "CSAFPID-32049"
        ],
        "known_affected": [
          "CSAFPID-31024",
          "CSAFPID-31025",
          "CSAFPID-31026",
          "CSAFPID-31027",
          "CSAFPID-31028",
          "CSAFPID-31029",
          "CSAFPID-31030",
          "CSAFPID-31031",
          "CSAFPID-31032",
          "CSAFPID-31033",
          "CSAFPID-31034",
          "CSAFPID-31035",
          "CSAFPID-31036"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.6.32",
          "product_ids": [
            "CSAFPID-31024",
            "CSAFPID-31025"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.5.36",
          "product_ids": [
            "CSAFPID-31026",
            "CSAFPID-31027",
            "CSAFPID-31028",
            "CSAFPID-31029",
            "CSAFPID-31030"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.3.34",
          "product_ids": [
            "CSAFPID-31031",
            "CSAFPID-31032"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.4.32",
          "product_ids": [
            "CSAFPID-31033",
            "CSAFPID-31034"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.4.40",
          "product_ids": [
            "CSAFPID-31035",
            "CSAFPID-31036"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 9.8,
            "environmentalSeverity": "CRITICAL",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 9.8,
            "temporalSeverity": "CRITICAL",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31024",
            "CSAFPID-31025",
            "CSAFPID-31026",
            "CSAFPID-31027",
            "CSAFPID-31028",
            "CSAFPID-31029",
            "CSAFPID-31030",
            "CSAFPID-31031",
            "CSAFPID-31032",
            "CSAFPID-31033",
            "CSAFPID-31034",
            "CSAFPID-31035",
            "CSAFPID-31036"
          ]
        }
      ],
      "title": "CVE-2025-41652"
    },
    {
      "cve": "CVE-2025-41653",
      "cwe": {
        "id": "CWE-410",
        "name": "Insufficient Resource Pool"
      },
      "notes": [
        {
          "category": "description",
          "text": "An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device\u0027s web server functionality by sending a specially crafted HTTP request with a malicious header, potentially causing the server to crash or become unresponsive.",
          "title": "Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32037",
          "CSAFPID-32038",
          "CSAFPID-32039",
          "CSAFPID-32040",
          "CSAFPID-32041",
          "CSAFPID-32042",
          "CSAFPID-32043",
          "CSAFPID-32044",
          "CSAFPID-32045",
          "CSAFPID-32046",
          "CSAFPID-32047",
          "CSAFPID-32048",
          "CSAFPID-32049"
        ],
        "known_affected": [
          "CSAFPID-31024",
          "CSAFPID-31025",
          "CSAFPID-31026",
          "CSAFPID-31027",
          "CSAFPID-31028",
          "CSAFPID-31029",
          "CSAFPID-31030",
          "CSAFPID-31031",
          "CSAFPID-31032",
          "CSAFPID-31033",
          "CSAFPID-31034",
          "CSAFPID-31035",
          "CSAFPID-31036"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.6.32",
          "product_ids": [
            "CSAFPID-31024",
            "CSAFPID-31025"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.5.36",
          "product_ids": [
            "CSAFPID-31026",
            "CSAFPID-31027",
            "CSAFPID-31028",
            "CSAFPID-31029",
            "CSAFPID-31030"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.3.34",
          "product_ids": [
            "CSAFPID-31031",
            "CSAFPID-31032"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.4.32",
          "product_ids": [
            "CSAFPID-31033",
            "CSAFPID-31034"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2025-05-19T08:00:00.000Z",
          "details": "Update to version V3.4.40",
          "product_ids": [
            "CSAFPID-31035",
            "CSAFPID-31036"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31024",
            "CSAFPID-31025",
            "CSAFPID-31026",
            "CSAFPID-31027",
            "CSAFPID-31028",
            "CSAFPID-31029",
            "CSAFPID-31030",
            "CSAFPID-31031",
            "CSAFPID-31032",
            "CSAFPID-31033",
            "CSAFPID-31034",
            "CSAFPID-31035",
            "CSAFPID-31036"
          ]
        }
      ],
      "title": "CVE-2025-41653"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.