An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices
Published Dec 6, 2019
9.8
CRITICALCVSS 3.1
EPSS 1.87%
Description
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Authentication Information used in a cookie is predictable and can lead to admin password compromise when captured on the network.
Affected products
No data.
Configuration 1
- ≤ 3.3.4
Running on/with
- n/a
Configuration 2
- ≤ 3.3.4
Running on/with
- n/a
Configuration 3
- ≤ 3.4.4
Running on/with
- n/a
Configuration 4
- ≤ 3.4.4
Running on/with
- n/a
Configuration 5
- ≤ 3.4.4
Running on/with
- n/a
Configuration 6
- ≤ 3.4.4
Running on/with
- n/a
Configuration 7
- ≤ 3.4.4
Running on/with
- n/a
Configuration 8
- ≤ 3.4.4
Running on/with
- n/a
Configuration 9
- ≤ 3.4.4
Running on/with
- n/a
Configuration 10
- ≤ 3.4.4
Running on/with
- n/a
Configuration 11
- ≤ 3.4.2
Running on/with
- n/a
Configuration 12
- ≤ 3.4.2
Running on/with
- n/a
Configuration 13
- ≤ 3.4.2
Running on/with
- n/a
Configuration 14
- ≤ 3.4.2
Running on/with
- n/a
Configuration 15
- ≤ 3.4.2
Running on/with
- n/a
Configuration 16
- ≤ 3.4.2
Running on/with
- n/a
Configuration 17
- ≤ 3.6.6
Running on/with
- n/a
Configuration 18
- ≤ 3.6.6
Running on/with
- n/a
Configuration 19
- ≤ 3.6.6
Running on/with
- n/a
Configuration 20
- ≤ 3.6.6
Running on/with
- n/a
Configuration 21
- ≤ 3.6.6
Running on/with
- n/a
Configuration 22
- ≤ 3.6.6
Running on/with
- n/a
Configuration 23
- ≤ 3.5.2
Running on/with
- n/a
Configuration 24
- ≤ 3.5.2
Running on/with
- n/a
Configuration 25
- ≤ 3.5.2
Running on/with
- n/a
Configuration 26
- ≤ 3.5.2
Running on/with
- n/a
Configuration 27
- ≤ 3.5.2
Running on/with
- n/a
Configuration 28
- ≤ 3.5.2
Running on/with
- n/a
Configuration 29
- ≤ 3.3.8
Running on/with
- n/a
Configuration 30
- ≤ 3.3.8
Running on/with
- n/a
Configuration 31
- ≤ 3.3.8
Running on/with
- n/a
Configuration 32
- ≤ 3.3.8
Running on/with
- n/a
Configuration 33
- ≤ 3.3.8
Running on/with
- n/a
Configuration 34
- ≤ 3.3.8
Running on/with
- n/a
Configuration 35
- ≤ 3.3.8
Running on/with
- n/a
Configuration 36
- ≤ 3.3.8
Running on/with
- n/a
Configuration 37
- ≤ 3.3.16
Running on/with
- n/a
Configuration 38
- ≤ 3.3.16
Running on/with
- n/a
Configuration 39
- ≤ 3.3.16
Running on/with
- n/a
Configuration 40
- ≤ 3.3.16
Running on/with
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (4)
- https://cert.vde.com/en-us/advisories x_refsource_MISCThird Party Advisory
- https://cert.vde.com/en-us/advisories/vde-2019-018 x_refsource_MISCThird Party Advisory
- https://mdcop.weidmueller.com/mediadelivery/asset/900_102694 x_refsource_CONFIRMVendor Advisory
- https://www.us-cert.gov/ics/advisories/icsa-19-339-02 x_refsource_MISCThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://cert.vde.com/en-us/advisories | x_refsource_MISCThird Party Advisory | |
| https://cert.vde.com/en-us/advisories/vde-2019-018 | x_refsource_MISCThird Party Advisory | |
| https://mdcop.weidmueller.com/mediadelivery/asset/900_102694 | x_refsource_CONFIRMVendor Advisory | |
| https://www.us-cert.gov/ics/advisories/icsa-19-339-02 | x_refsource_MISCThird Party Advisory |
Change history (0)
No recorded changes yet.