CVE-2021-20999: Weidmueller IoT-GW30-4g-Eu Firmware

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting this vulnerability the device may be manipulated or the operation may be stopped.

Affected products

• Weidmueller IoT-GW30-4g-Eu Firmware: from 1.3.0, before 1.9.1 (fixed in 1.9.1); from 1.10.0, before 1.10.3 (fixed in 1.10.3); version 1.11.0 only; version 1.12.1 only
• Weidmueller IoT-GW30 Firmware: from 1.3.0, before 1.9.1 (fixed in 1.9.1); from 1.10.0, before 1.10.3 (fixed in 1.10.3); version 1.11.0 only; version 1.12.1 only
• Weidmueller UC20-WL2000-Ac Firmware: from 1.3.0, before 1.9.1 (fixed in 1.9.1); from 1.10.0, before 1.10.3 (fixed in 1.10.3); version 1.11.0 only; version 1.12.1 only
• Weidmueller UC20-WL2000-IoT Firmware: from 1.3.0, before 1.9.1 (fixed in 1.9.1); from 1.10.0, before 1.10.3 (fixed in 1.10.3); version 1.11.0 only; version 1.12.1 only

Published 2021-05-13. Last modified 2026-06-17.