Weidmueller: multiple vulnerabilities in various Industrial Ethernet managed switches
Multiple issues have been found. Please check the CVEs for details.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-16674US | critical9.8OT elevated | — | ||
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Authentication Informatio… | ||||
| CVE-2019-16673US | medium6.5 | — | ||
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Passwords are stored in c… | ||||
| CVE-2019-16672US | critical9.8OT elevated | — | ||
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Sensitive Credentials dat… | ||||
| CVE-2019-16671US | medium6.5 | — | ||
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Remote authenticated user… | ||||
| CVE-2019-16670US | critical9.8 | — | ||
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. The Authentication mechan… | ||||
references
External citations — patches, advisories, analysis.
remediations (200)
- FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10M-1GT-2GS-7TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10M-1GT-2GS-7TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10M-1GT-2GS-7TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10M-1GT-2GS-7TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10M-1GT-2GS-7TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10M-3GT-7TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10M-3GT-7TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10M-3GT-7TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10M-3GT-7TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10M-3GT-7TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10MT-1GT-2GS-7TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10MT-1GT-2GS-7TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10MT-1GT-2GS-7TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10MT-1GT-2GS-7TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10MT-1GT-2GS-7TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10MT-3GT-7TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10MT-3GT-7TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10MT-3GT-7TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10MT-3GT-7TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10MT-3GT-7TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.4 Build 16102416 installed on IE-SW-PL09M-5GC-4GT
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.4 Build 16102416 installed on IE-SW-PL09M-5GC-4GT
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.4 Build 16102416 installed on IE-SW-PL09M-5GC-4GT
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.4 Build 16102416 installed on IE-SW-PL09M-5GC-4GT
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.4 Build 16102416 installed on IE-SW-PL09M-5GC-4GT
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.4 Build 16102416 installed on IE-SW-PL09MT-5GC-4GT
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.4 Build 16102416 installed on IE-SW-PL09MT-5GC-4GT
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.4 Build 16102416 installed on IE-SW-PL09MT-5GC-4GT
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.4 Build 16102416 installed on IE-SW-PL09MT-5GC-4GT
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.4 Build 16102416 installed on IE-SW-PL09MT-5GC-4GT
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-6TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-6TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-6TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-6TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-6TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-6TX-2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-6TX-2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-6TX-2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-6TX-2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-6TX-2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-6TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-6TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-6TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-6TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-6TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-8TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-8TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-8TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-8TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-8TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-6TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-6TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-6TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-6TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-6TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-6TX-2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-6TX-2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-6TX-2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-6TX-2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-6TX-2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-6TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-6TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-6TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-6TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-6TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-8TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-8TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-8TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-8TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-8TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16M-14TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16M-14TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16M-14TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16M-14TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16M-14TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16M-14TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16M-14TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16M-14TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16M-14TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16M-14TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16M-16TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16M-16TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16M-16TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16M-16TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16M-16TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16MT-14TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16MT-14TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16MT-14TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16MT-14TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16MT-14TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16MT-14TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16MT-14TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16MT-14TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16MT-14TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16MT-14TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16MT-16TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16MT-16TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16MT-16TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16MT-16TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16MT-16TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC-16TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC-16TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC-16TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC-16TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC-16TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC14TX2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC14TX2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC14TX2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC14TX2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC14TX2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC14TX2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC14TX2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC14TX2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC14TX2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC14TX2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC14TX2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC14TX2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC14TX2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC14TX2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC14TX2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC-16TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC-16TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC-16TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC-16TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC-16TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC14TX2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC14TX2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC14TX2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC14TX2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC14TX2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC14TX2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC14TX2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC14TX2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC14TX2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC14TX2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC14TX2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC14TX2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC14TX2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC14TX2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC14TX2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-5TX-1SC-2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-5TX-1SC-2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-5TX-1SC-2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-5TX-1SC-2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-5TX-1SC-2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-5TX-3SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-5TX-3SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-5TX-3SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-5TX-3SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-5TX-3SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-6TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-6TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-6TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-6TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-6TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-6TX-2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-6TX-2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-6TX-2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-6TX-2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-6TX-2SCS
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-6TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-6TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-6TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-6TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-6TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-8TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-8TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-8TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-8TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-8TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05M-3TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05M-3TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05M-3TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05M-3TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05M-3TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05M-3TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05M-3TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05M-3TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05M-3TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05M-3TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05M-5TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05M-5TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05M-5TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05M-5TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05M-5TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05MT-3TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05MT-3TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05MT-3TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05MT-3TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05MT-3TX-2SC
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05MT-3TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05MT-3TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05MT-3TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05MT-3TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05MT-3TX-2ST
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05MT-5TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05MT-5TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05MT-5TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05MT-5TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
- FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05MT-5TX
For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan