CVE:CVE-2021-33531
CNNVD:CNNVD-202106-1748
Weidmueller Industrial WLAN devices是德国Weidmueller公司的一个工控WIAN。
Weidmueller Industrial WLAN 存在安全漏洞，该漏洞源于设备操作系统包含一个未公开的加密密码，允许创建自定义诊断脚本。攻击者可以在以低权限用户身份进行身份验证时发送诊断脚本来触发此漏洞。
solution:Upgrade weidmueller ie-wl-bl-ap-cl-eu_firmware to a higher version than 1.16.18,1.11.10,and avoid the version (,1.16.18],(,1.11.10]; Upgrade weidmueller ie-wlt-bl-ap-cl-eu_firmware to a higher version than 1.16.18,1.11.10,and avoid the version (,1.16.18],(,1.11.10]; Upgrade weidmueller ie-wl-bl-ap-cl-us_firmware to a higher version than 1.16.18,1.11.10,and avoid the version (,1.16.18],(,1.11.10]; Upgrade weidmueller ie-wlt-bl-ap-cl-us_firmware to a higher version than 1.16.18,1.11.10,and avoid the version (,1.16.18],(,1.11.10]; Upgrade weidmueller ie-wl-vl-ap-br-cl-eu_firmware to a higher version than 1.16.18,1.11.10,and avoid the version (,1.16.18],(,1.11.10]; Upgrade weidmueller ie-wlt-vl-ap-br-cl-eu_firmware to a higher version than 1.16.18,1.11.10,and avoid the version (,1.16.18],(,1.11.10]; Upgrade weidmueller ie-wl-vl-ap-br-cl-us_firmware to a higher version than 1.16.18,1.11.10,and avoid the version (,1.16.18],(,1.11.10]; Upgrade weidmueller ie-wlt-vl-ap-br-cl-us_firmware to a higher version than 1.16.18,1.11.10,and avoid the version (,1.16.18],(,1.11.10]