# CVE-2021-33528

## Summary

- **CVE ID:** CVE-2021-33528
- **Severity:** HIGH
- **CVSS Score:** 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- **CWE:** CWE-710
- **Published:** Jun 25, 2021
- **Last Modified:** Mar 13, 2026

## Description

In Weidmueller Industrial WLAN devices in multiple versions an exploitable privilege escalation vulnerability exists in the iw_console functionality. A specially crafted menu selection string can cause an escape from the restricted console, resulting in system access as the root user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.

## Affected Products

- Weidmüller — IE-WL(T)-BL-AP-CL-XX (IE-WL-BL-AP-CL-EU (2536600000))
- Weidmüller — IE-WL(T)-BL-AP-CL-XX (IE-WLT-BL-AP-CL-EU (2536650000))
- Weidmüller — IE-WL(T)-BL-AP-CL-XX (IE-WL-BL-AP-CL-US (2536660000))
- Weidmüller — IE-WL(T)-BL-AP-CL-XX (IE-WLT-BL-AP-CL-US (2536670000))
- Weidmüller — IE-WL(T)-VL-AP-CL-XX (IE-WL-VL-AP-BR-CL-EU (2536680000))
- Weidmüller — IE-WL(T)-VL-AP-CL-XX (IE-WLT-VL-AP-BR-CL-EU (2536690000))
- Weidmüller — IE-WL(T)-VL-AP-CL-XX (IE-WL-VL-AP-BR-CL-US (2536700000))
- Weidmüller — IE-WL(T)-VL-AP-CL-XX (IE-WLT-VL-AP-BR-CL-US (2536710000))

## References

- [CNA](https://cert.vde.com/en-us/advisories/vde-2021-026)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.70%
- **EPSS Percentile:** 71.6

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._