Weidmueller Ie-Sr-2tx-Wl-4g-Us-V vulnerabilities

5 CVEs affecting Weidmueller Ie-Sr-2tx-Wl-4g-Us-V, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-41687, published 2025-07-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-41684, published 2025-07-23. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of improper sanitizing of user input in the Main Web Interface (endpoint…
CVE-2025-41683, published 2025-07-23. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of improper sanitizing of user input in the Main Web Interface (endpoint…
CVE-2025-41687, published 2025-07-23. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. An unauthenticated remote attacker may use a stack based buffer overflow in the u-link Management API to gain full access on the affected devices.
CVE-2025-41663, published 2025-06-11. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. For u-link Management API an unauthenticated remote attacker in a man-in-the-middle position can inject arbitrary commands in responses returned by WWH servers, which are then executed with elevated…
CVE-2025-41661, published 2025-06-11. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. An unauthenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of Cross-Site Request Forgery (CSRF) protection.