CVE-2021-33529

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In Weidmueller Industrial WLAN devices in multiple versions the usage of hard-coded cryptographic keys within the service agent binary allows for the decryption of captured traffic across the network from or to the device.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-798

Affected software

VendorProductVersions
WeidmüllerIE-WL(T)-BL-AP-CL-XX>= IE-WL-BL-AP-CL-EU (2536600000), <= V1.16.18 (Build 18081617); >= IE-WLT-BL-AP-CL-EU (2536650000), <= V1.16.18 (Build 18081617); >= IE-WL-BL-AP-CL-US (2536660000), <= V1.16.18 (Build 18081617); >= IE-WLT-BL-AP-CL-US (2536670000), <= V1.16.18 (Build 18081617)
WeidmüllerIE-WL(T)-VL-AP-CL-XX>= IE-WL-VL-AP-BR-CL-EU (2536680000), <= V1.11.10 (Build 18122616); >= IE-WLT-VL-AP-BR-CL-EU (2536690000), <= V1.11.10 (Build 18122616); >= IE-WL-VL-AP-BR-CL-US (2536700000), <= V1.11.10 (Build 18122616); >= IE-WLT-VL-AP-BR-CL-US (2536710000), <= V1.11.10 (Build 18122616)

References

Timeline

Published
Jun 25, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-335308.8In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in encrypted diagnostic scCVE-2021-335318.8In Weidmueller Industrial WLAN devices in multiple versions an exploitable use of hard-coded credentials vulnerability exists in multiple iwCVE-2021-335328.8In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionaliCVE-2021-335338.8In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionaliCVE-2021-335347.2In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the hostname functionalCVE-2021-335358.8In Weidmueller Industrial WLAN devices in multiple versions an exploitable format string vulnerability exists in the iw_console conio_writesCVE-2021-335367.5In Weidmueller Industrial WLAN devices in multiple versions an exploitable denial-of-service vulnerability exists in ServiceAgent functionalCVE-2021-335378.8In Weidmueller Industrial WLAN devices in multiple versions an exploitable remote code execution vulnerability exists in the iw_webs configuCVE-2021-335388.8In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs accouCVE-2021-335397.2In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname procesCVE-2021-335407.3In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root direCVE-2021-335417.5Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service vulnerability. The c
CVE-2021-33529: High severity, CVSS 7.5 | Vulnix