ANALYZED This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.
Description An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of improper sanitizing of user input in the Main Web Interface (endpoint tls_iotgen_setting).
A command injection vulnerability has been identified in Weidmueller security routers IE-SR-2TX, specifically in the Main Web Interface endpoint tls_iotgen_setting. This vulnerability allows authenticated remote attackers to execute arbitrary commands with root privileges on the affected devices. The issue arises from inadequate sanitization of user input, creating an opportunity for exploitation.
Users are advised to update to version 1.49 for the IE-SR-2TX-WL model and version 1.62 for the IE-SR-2TX-WL-4G-EU and IE-SR-2TX-WL-4G-US-V models. Weidmueller also recommends changing default passwords and minimizing network exposure by limiting access to trusted networks.
Show AI summary Metrics CVSS Version 4.0 CVSS Version 3.x CVSS Version 2.0 SSVC
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 23, 2025 Exploitation: NoneAutomatable: NoTechnical Impact: Total
CISA-ADP
Assessed Jul 23, 2025 Exploitation: NoneAutomatable: NoTechnical Impact: Total
References to Advisories, Solutions, and Tools By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration CWE-ID CWE Name Source CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') [email protected]
Affected Products Product Versions Weidmueller IE-SR-2TX-WL All versions
CPE cpe:2.3:h:weidmueller:ie-sw-vl05mt-3tx-2sc:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-vl05m-3tx-2sc_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-vl05m-3tx-2sc:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-vl05mt-3tx-2sc_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl08m-6tx-2sc:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl08m-6tx-2sc_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl16mt-14tx-2sc_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl16m-14tx-2sc:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl16m-14tx-2sc_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl16mt-14tx-2sc:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-vl08mt-6tx-2sc:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-vl08mt-6tx-2sc_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl16mt-14tx-2st:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl16mt-14tx-2st_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl08mt-6tx-2sc:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl08mt-6tx-2sc_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl16m-14tx-2st:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl16m-14tx-2st_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl08m-6tx-2st_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl08m-6tx-2st:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl08m-6tx-2scs:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl08m-6tx-2scs_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl18m-2gc-16tx:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl18m-2gc-16tx_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl18mt-2gc-16tx:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl18mt-2gc-16tx_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-vl08mt-6tx-2st:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-vl08mt-6tx-2st_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl08mt-6tx-2st:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl08mt-6tx-2st_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl08mt-6tx-2scs:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl08mt-6tx-2scs_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-vl08mt-5tx-3sc:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-vl08mt-5tx-3sc_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl18m-2gc14tx2sc:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-vl08mt-5tx-1sc-2scs:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-vl08mt-5tx-1sc-2scs_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl18m-2gc14tx2sc_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl18mt-2gc14tx2sc:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl18mt-2gc14tx2sc_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl18m-2gc14tx2st_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl18m-2gc14tx2st:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl18mt-2gc14tx2st_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl18mt-2gc14tx2st:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-vl08mt-8tx:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-vl08mt-8tx_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl18m-2gc14tx2scs:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl18m-2gc14tx2scs_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl18mt-2gc14tx2scs:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl18mt-2gc14tx2scs_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl08m-8tx:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl08m-8tx_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl08mt-8tx_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl08mt-8tx:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl10m-3gt-7tx_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl10m-3gt-7tx:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl10mt-3gt-7tx_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl10mt-3gt-7tx:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl09m-5gc-4gt:*:*:*:*:*:*:*:* cpe:2.3:h:weidmueller:ie-sw-pl09mt-5gc-4gt:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl09m-5gc-4gt_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:weidmueller:ie-sw-pl09mt-5gc-4gt_firmware:*:*:*:*:*:*:*:* Remediation No remediation found in references. Weidmueller IE-SR-2TX-WL-4G-EU All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references. Weidmueller IE-SR-2TX-WL-4G-US-V All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
Change History 3 change records found show changes
Volerion