CVE-2019-16674

mediumPriorität · verfolgen · 40OT-Risiko · erhöhtEPSS 0.019 · 79. PerzentilDEEUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
1.87% (79th) EPSS
CVSS 5 · medium
Is it mine?
201 products
Prüfe deine Angriffsfläche
Who says so?
4 sources
cnnvd · enisa_euvd · cisa_csaf_ot · weidmueller_psirt

EPSS · bewertet 2026-10-27

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Authentication Information used in a cookie is predictable and can lead to admin password compromise when captured on the network.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10M-1GT-2GS-7TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10M-3GT-7TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10MT-1GT-2GS-7TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10MT-3GT-7TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.3.4 Build 16102416 installed on IE-SW-PL09M-5GC-4GTweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.3.4 Build 16102416 installed on IE-SW-PL09MT-5GC-4GTweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-6TX-2SCweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-6TX-2SCSweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-6TX-2STweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-8TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-6TX-2SCweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-6TX-2SCSweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-6TX-2STweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-8TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16M-14TX-2SCweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16M-14TX-2STweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16M-16TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16MT-14TX-2SCweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16MT-14TX-2STweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16MT-16TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC-16TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC14TX2SCweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC14TX2SCSweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC14TX2STweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC-16TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC14TX2SCweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC14TX2SCSweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC14TX2STweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-5TX-1SC-2SCSweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-5TX-3SCweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-6TX-2SCweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-6TX-2SCSweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-6TX-2STweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-8TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05M-3TX-2SCweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05M-3TX-2STweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05M-5TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05MT-3TX-2SCweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05MT-3TX-2STweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05MT-5TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • BehobenIE-SW-PL08M-6TX-2SC firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL08M-6TX-2SCS firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL08M-6TX-2ST firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL08M-8TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL08MT-6TX-2SC firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL08MT-6TX-2SCS firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL08MT-6TX-2ST firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL08MT-8TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL09M-5GC-4GT firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL09MT-5GC-4GT firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL10M-1GT-2GS-7TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL10M-3GT-7TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL10MT-1GT-2GS-7TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL10MT-3GT-7TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL16M-14TX-2SC firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL16M-14TX-2ST firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL16M-16TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL16MT-14TX-2SC firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL16MT-14TX-2ST firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL16MT-16TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL18M-2GC-16TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL18M-2GC14TX2SC firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL18M-2GC14TX2SCS firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL18M-2GC14TX2ST firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL18MT-2GC-16TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL18MT-2GC14TX2SC firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL18MT-2GC14TX2SCS firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-PL18MT-2GC14TX2ST firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-VL05M-3TX-2SC firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-VL05M-3TX-2ST firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-VL05M-5TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-VL05MT-3TX-2SC firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-VL05MT-3TX-2ST firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-VL05MT-5TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-VL08MT-5TX-1SC-2SCS firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-VL08MT-5TX-3SC firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-VL08MT-6TX-2SC firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-VL08MT-6TX-2SCS firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-VL08MT-6TX-2ST firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • BehobenIE-SW-VL08MT-8TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • MitigationIE-SW-PL08M-6TX-2SC firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL08M-6TX-2SCS firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL08M-6TX-2ST firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL08M-8TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL08MT-6TX-2SC firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL08MT-6TX-2SCS firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL08MT-6TX-2ST firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL08MT-8TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL09M-5GC-4GT firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL09MT-5GC-4GT firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL10M-1GT-2GS-7TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL10M-3GT-7TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL10MT-1GT-2GS-7TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL10MT-3GT-7TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL16M-14TX-2SC firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL16M-14TX-2ST firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL16M-16TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL16MT-14TX-2SC firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL16MT-14TX-2ST firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL16MT-16TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL18M-2GC-16TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL18M-2GC14TX2SC firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL18M-2GC14TX2SCS firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL18M-2GC14TX2ST firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL18MT-2GC-16TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL18MT-2GC14TX2SC firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL18MT-2GC14TX2SCS firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL18MT-2GC14TX2ST firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL05M-3TX-2SC firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL05M-3TX-2ST firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL05M-5TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL05MT-3TX-2SC firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL05MT-3TX-2ST firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL05MT-5TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL08MT-5TX-1SC-2SCS firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL08MT-5TX-3SC firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL08MT-6TX-2SC firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL08MT-6TX-2SCS firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL08MT-6TX-2ST firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL08MT-8TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.8
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–critical · 5–9.8

v2.05mediumAV:N/AC:L/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 2.9
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 5.9
v3.09.8criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US
v3.09.8criticalCVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:Nsecondary · ENISA EU
v3.09.8criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · cve@mitre.org USAusnutzbarkeit 3.9 · Auswirkung 5.9
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Weidmüller PSIRT DE
v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-330USprimärCWE-319USCWE-341US
04

betroffene Produkte (201)

Betroffene Produkte und Versionsbereiche.

20 von 201 angezeigt
05

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

  • VDE-2019-018Weidmueller: multiple vulnerabilities in various Industrial Ethernet managed switches2019-12-05csaf · weidmueller_psirtDE

    Multiple issues have been found. Please check the CVEs for details.

  • ICSA-19-339-02Weidmueller Industrial Ethernet Switches2019-12-05icsa · cisa_csaf_otUS

    Successful exploitation of these vulnerabilities could allow a remote attacker to gain unauthorized access to the device, affecting the confidentiality, integrity, and availability of the device the attacker is targeting.

06

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdcisa_csaf_otweidmueller_psirtNVDCVE.orgMITRE
veröffentlicht 2019-12-06geändert 2026-06-17
09

Referenzen (14)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan