Weidmueller: Security routers IE-SR-2TX are affected by multiple vulnerabilities
Weidmueller security routers IE-SR-2TX are affected by multiple vulnerabilities (CVE-2025-41661, CVE-2025-41663, CVE-2025-41683, CVE-2025-41684, CVE-2025-41687). Weidmueller has released new firmware versions of the affected products to fix the vulnerabilities. **Update Version 1.1.0:** Added CVEs CVE-2025-41683, CVE-2025-41684 and CVE-2025-41687. Updated CVSS Score for CVE-2025-41663. Removed CVE-2025-41662.
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-41687US | — | — | ||
An unauthenticated remote attacker may use a stack based buffer overflow in the u-link Management API to gain full access on the affected devices. | ||||
| CVE-2025-41684US | — | — | ||
An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of improper sanitizing of user input in the Main Web Interface… | ||||
| CVE-2025-41683US | — | — | ||
An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of improper sanitizing of user input in the Main Web Interface… | ||||
| CVE-2025-41663US | — | — | ||
For u-link Management API an unauthenticated remote attacker in a man-in-the-middle position can inject arbitrary commands in responses returned by WWH servers, which are then exec… | ||||
| CVE-2025-41661US | — | — | ||
An unauthenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of Cross-Site Request Forgery (CSRF) protection. | ||||
references
External citations — patches, advisories, analysis.
- VDE-2025-052: Weidmueller: Security routers IE-SR-2TX are affected by multiple vulnerabilities - HTMLself
- CERT@VDE Security Advisories for Weidmuellerexternal
- Weidmueller Security Advisory Boardexternal
- VDE-2025-052: Weidmueller: Security routers IE-SR-2TX are affected by multiple vulnerabilities - CSAFself
remediations (15)
- FixedFirmware <V1.49 installed on IE-SR-2TX-WL
Update to version V1.49
- FixedFirmware <V1.49 installed on IE-SR-2TX-WL
Update to version V1.49
- FixedFirmware <V1.49 installed on IE-SR-2TX-WL
Update to version V1.49
- FixedFirmware <V1.49 installed on IE-SR-2TX-WL
Update to version V1.49
- FixedFirmware <V1.49 installed on IE-SR-2TX-WL
Update to version V1.49
- FixedFirmware <V1.62 installed on IE-SR-2TX-WL-4G-EU
Update to version V1.62
- FixedFirmware <V1.62 installed on IE-SR-2TX-WL-4G-EU
Update to version V1.62
- FixedFirmware <V1.62 installed on IE-SR-2TX-WL-4G-EU
Update to version V1.62
- FixedFirmware <V1.62 installed on IE-SR-2TX-WL-4G-EU
Update to version V1.62
- FixedFirmware <V1.62 installed on IE-SR-2TX-WL-4G-EU
Update to version V1.62
- FixedFirmware <V1.62 installed on IE-SR-2TX-WL-4G-US-V
Update to version V1.62
- FixedFirmware <V1.62 installed on IE-SR-2TX-WL-4G-US-V
Update to version V1.62
- FixedFirmware <V1.62 installed on IE-SR-2TX-WL-4G-US-V
Update to version V1.62
- FixedFirmware <V1.62 installed on IE-SR-2TX-WL-4G-US-V
Update to version V1.62
- FixedFirmware <V1.62 installed on IE-SR-2TX-WL-4G-US-V
Update to version V1.62
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan