Login Request a demo
Critical severity · published May 27, 2025
CVE-2025-41651
Weidmueller: Missing Authentication Vulnerability in Industrial Ethernet Switches
9.8
CVSS
0.6%
EPSS
No
On KEV
Description
Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IE
IE-SW-PL10M-3GT-7TX · Weidmueller
0.0.0 before 3.3.34 · source: vendor
IE
IE-SW-PL10MT-3GT-7TX · Weidmueller
0.0.0 before 3.3.34 · source: vendor
IE
IE-SW-PL16M-16TX · Weidmueller
0.0.0 before 3.4.32 · source: vendor
IE
IE-SW-PL16MT-16TX · Weidmueller
0.0.0 before 3.4.32 · source: vendor
IE
IE-SW-PL18M-2GC-16TX · Weidmueller
0.0.0 before 3.4.40 · source: vendor
IE
IE-SW-PL18MT-2GC-16TX · Weidmueller
0.0.0 before 3.4.40 · source: vendor
IE
IE-SW-VL05M-5TX · Weidmueller
0.0.0 before 3.6.32 · source: vendor
IE
IE-SW-VL05MT-5TX · Weidmueller
0.0.0 before 3.6.32 · source: vendor
IE
IE-SW-VL08MT-5TX-1SC-2SCS · Weidmueller
0.0.0 before 3.5.36 · source: vendor
IE
IE-SW-VL08MT-6TX-2SC · Weidmueller
0.0.0 before 3.5.36 · source: vendor
IE
IE-SW-VL08MT-6TX-2SCS · Weidmueller
0.0.0 before 3.5.36 · source: vendor
IE
IE-SW-VL08MT-6TX-2ST · Weidmueller
0.0.0 before 3.5.36 · source: vendor
Affected product
IE
IE-SW-PL10M-3GT-7TX
Weidmueller
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-41651
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-41651
certvde.com
https://certvde.com/en/advisories/VDE-2025-044/
More from IE-SW-PL10M-3GT-7TX
9.8
CVE-2025-41652
Weidmueller: Authentication Bypass Vulnerability in Industrial Ethernet Switches
7.5
CVE-2025-41653
Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet Switches
7.5
CVE-2025-41650
Weidmueller: Denial-of-Service Vulnerability in Industrial Ethernet Switches
7.5
CVE-2025-41649
Weidmueller: Out-of-Bounds Write Vulnerability in Industrial Ethernet Switches