Weidmueller Ie-Sw-PL16MT-16tx vulnerabilities

5 CVEs affecting Weidmueller Ie-Sw-PL16MT-16tx, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-41653, published 2025-05-27.

More from Weidmueller.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-41651, published 2025-05-27. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of…
• CVE-2025-41653, published 2025-05-27. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicious header,…
• CVE-2025-41650, published 2025-05-27. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. An unauthenticated remote attacker can exploit input validation in cmd services of the devices, allowing them to disrupt system operations and potentially cause a denial-of-service.
• CVE-2025-41649, published 2025-05-27. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. An unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer, potentially leading to a denial-of-service condition for the devices.
• CVE-2025-41652, published 2025-05-27. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. The devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism. An unauthenticated remote attacker could exploit this weakness by performing brute-force attacks to…