CVE-2021-33528
In Weidmueller Industrial WLAN devices in multiple versions an exploitable privilege escalation vulnerability exists in the iw_console functionality. A specially crafted menu selection string can cause an escape from the restricted console, resulting in system access as the root user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS probability
- 0.70%
- CWE
- CWE-710
- Published
- 2021-06-25
- Last modified
- 2026-03-13
Affected products
- Weidmüller IE-WL(T)-BL-AP-CL-XX
- Weidmüller IE-WL(T)-BL-AP-CL-XX
- Weidmüller IE-WL(T)-BL-AP-CL-XX
- Weidmüller IE-WL(T)-BL-AP-CL-XX
- Weidmüller IE-WL(T)-VL-AP-CL-XX
- Weidmüller IE-WL(T)-VL-AP-CL-XX
- Weidmüller IE-WL(T)-VL-AP-CL-XX
- Weidmüller IE-WL(T)-VL-AP-CL-XX
Weakness type
Related vulnerabilities
- CVE-2025-0007 — Insufficient validation within Xilinx Run Time framework could allow a local attacker to escalate...
- CVE-2023-30961 — Palantir Gotham UI bug that could lead to incorrect data classification
- CVE-2021-27501 — Philips Vue PACS Improper Adherence to Coding Standards
- CVE-2020-1613 — Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.
- CVE-2020-1603 — Junos OS: Improper handling of specific IPv6 packets sent by clients eventually kernel crash (vmcore) the device.