CVE-2025-3020: Wiesemann & Theis ERP-Gateway 12x Digital Input, 6x Digital Relais
Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.
An low privileged remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into several fields of the configuration webpage with limited impact.
Affected products
- Wiesemann & Theis ERP-Gateway 12x Digital Input, 6x Digital Relais: any version
- Wiesemann & Theis ERP-Gateway 2x Digital Input, 2x Digital Output: any version
- Wiesemann & Theis ERP-Gateway 2x Digital Poe: any version
- Wiesemann & Theis Web-Alarm 6x6 Digitalweb-Alarm 6x6 Digital: any version
- Wiesemann & Theis Web-Count 6x Digital: before 3.79 (fixed in 3.79)
- Wiesemann & Theis Web-Graph Air Quality: any version
- Wiesemann & Theis Web-Io 12x Digital Input, 6x Digital Relais: any version
- Wiesemann & Theis Web-Io Analog-In/out 2x 0/4..20ma Poe: any version
- Wiesemann & Theis Web-Io Digital 12xin, 12xout: any version; before 4.08 (fixed in 4.08)
- Wiesemann & Theis Web-Io Digital 12xin, 12xout, 1xrs232: any version
- Wiesemann & Theis Web-Io Digital 2xin, 2xout: any version
- Wiesemann & Theis Web-Io Digital Logger 6xin, 6xout: before 3.70 (fixed in 3.70)
- Wiesemann & Theis Web-Thermo-Hygrobarograph: any version
- Wiesemann & Theis Web-Thermo-Hygrograph: any version
- Wiesemann & Theis Web-Thermograph 2x: any version
- Wiesemann & Theis Web-Thermograph 8x: any version
- Wiesemann & Theis Web-Thermograph Ntc: any version
- Wiesemann & Theis Web-Thermograph Ntc Poe: any version
- Wiesemann & Theis Web-Thermograph PT100 / PT1000: any version
- Wiesemann & Theis Web-Thermograph PT100 / PT1000 Poe: any version
- Wiesemann & Theis Web-Thermograph Relais: any version
Published 2025-05-06. Last modified 2026-06-17.