CVE-2019-16672

mediumpriority · track · 39OT risk · elevatedEPSS 0.013 · 70 %ileDEEUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
1.28% (70th) EPSS
CVSS 5 · medium
Is it mine?
201 products
Check your exposure
Who says so?
4 sources
cnnvd · enisa_euvd · cisa_csaf_ot · weidmueller_psirt

EPSS · scored 2026-10-27

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Sensitive Credentials data is transmitted in cleartext.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10M-1GT-2GS-7TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10M-3GT-7TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10MT-1GT-2GS-7TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.3.16 Build 16102416 installed on IE-SW-PL10MT-3GT-7TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.3.4 Build 16102416 installed on IE-SW-PL09M-5GC-4GTweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.3.4 Build 16102416 installed on IE-SW-PL09MT-5GC-4GTweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-6TX-2SCweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-6TX-2SCSweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-6TX-2STweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08M-8TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-6TX-2SCweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-6TX-2SCSweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-6TX-2STweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.3.8 Build 16102416 installed on IE-SW-PL08MT-8TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16M-14TX-2SCweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16M-14TX-2STweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16M-16TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16MT-14TX-2SCweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16MT-14TX-2STweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.4.2 Build 16102416 installed on IE-SW-PL16MT-16TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC-16TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC14TX2SCweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC14TX2SCSweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18M-2GC14TX2STweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC-16TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC14TX2SCweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC14TX2SCSweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.4.4 Build 16102416 installed on IE-SW-PL18MT-2GC14TX2STweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-5TX-1SC-2SCSweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-5TX-3SCweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-6TX-2SCweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-6TX-2SCSweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-6TX-2STweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.5.2 Build 16102415 installed on IE-SW-VL08MT-8TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05M-3TX-2SCweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05M-3TX-2STweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05M-5TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05MT-3TX-2SCweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05MT-3TX-2STweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedFirmware <=V3.6.6 Build 16102415 installed on IE-SW-VL05MT-5TXweidmueller_psirt

    For all potential vulnerabilities, customers can download a patched firmware to secure their switches properly. Please download and install the latest firmware for your switch by following the procedure below: Use the link www.weidmueller.com external link external link Enter within search field on the web page the product number of the switch you want to update and press 'enter' On next page expand the drop-down menu 'show downloads' Download the respective firmware from the download table Install the firmware on your switch Solution for CVE-2019-16672 a.) Solution for vulnerability, valid for switch series IE-SW-VL05M and IE-SW-VL08MT To avoid the vulnerabilities referred to in this section, it is necessary to install patched firmware. After installation of patched firmware the web interface can be accessed via encrypted communication using https, and web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' b.) Solution for vulnerability, valid for switch series IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M To avoid the vulnerabilities referred to in this section, installation of patched firmware is not necessary. Web interface access can be configured to ensure encrypted connections by selecting 'https only'. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > System: Set the 'Web Configuration' to 'https only' Solution for CVE-2019-16670, CVE-2019-16671, CVE-2019-16673, CVE-2019-16674 Solution for vulnerabilities, valid for switch series IE-SW-VL05M, IE-SW-VL08MT, IE-SW-PL08M, IE-SW-PL10M, IE-SW-PL16M, IE-SW-PL18M, IE-SW-PL09M After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmüllermüller configuration software named 'WM Switch Utility' for Windows OS and to enable an encrypted search service, that will be working with the new 'Weidmüllermüller Switch Configuration Utility'. (available soon) Both services – the encrypted and the unencrypted search service - are enabled by default. To avoid the vulnerabilities referred to in this section the unencrypted search service should be disabled. The respective web interface menu section for this setting can be reached via the following path: Main Menu > Basic Settings > Security > Management Interface: Uncheck the checkbox 'Enable Search Service' Note: After disabling the unencrypted search service the switches can no longer be found or configured with the current 'WM Switch Utility'! Web interface settings are not affected by this configuration. --- Please find below the appropriate patched firmware versions for all affected products. | **Product Number** | **Product Name** | **Patched Firmware Version** | |---------------------|---------------------------------|---------------------------------------| | 1504280000 | IE-SW-VL05M-5TX | ≥ V3.6.24_Build_19062809 | | 1504310000 | IE-SW-VL05MT-5TX | ≥ V3.6.24_Build_19062809 | | 1504330000 | IE-SW-VL05M-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504350000 | IE-SW-VL05MT-3TX-2SC | ≥ V3.6.24_Build_19062809 | | 1504370000 | IE-SW-VL05M-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1504390000 | IE-SW-VL05MT-3TX-2ST | ≥ V3.6.24_Build_19062809 | | 1240940000 | IE-SW-VL08MT-8TX | ≥ V3.5.22_Build_19062810 | | 1240970000 | IE-SW-VL08MT-5TX-3SC | ≥ V3.5.22_Build_19062810 | | 1345240000 | IE-SW-VL08MT-5TX-1SC-2SCS | ≥ V3.5.22_Build_19062810 | | 1240990000 | IE-SW-VL08MT-6TX-2ST | ≥ V3.5.22_Build_19062810 | | 1344770000 | IE-SW-VL08MT-6TX-2SC | ≥ V3.5.22_Build_19062810 | | 1241020000 | IE-SW-VL08MT-6TX-2SCS | ≥ V3.5.22_Build_19062810 | | 1241040000 | IE-SW-PL08M-8TX | ≥ V3.3.16_Build_19062811 | | 1286780000 | IE-SW-PL08MT-8TX | ≥ V3.3.16_Build_19062811 | | 1241070000 | IE-SW-PL08M-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1286790000 | IE-SW-PL08MT-6TX-2SC | ≥ V3.3.16_Build_19062811 | | 1241080000 | IE-SW-PL08M-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1286800000 | IE-SW-PL08MT-6TX-2ST | ≥ V3.3.16_Build_19062811 | | 1241090000 | IE-SW-PL08M-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1286810000 | IE-SW-PL08MT-6TX-2SCS | ≥ V3.3.16_Build_19062811 | | 1241290000 | IE-SW-PL10M-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1286930000 | IE-SW-PL10MT-3GT-7TX | ≥ V3.3.24_Build_19062813 | | 1241300000 | IE-SW-PL10M-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1286940000 | IE-SW-PL10MT-1GT-2GS-7TX | ≥ V3.3.24_Build_19062813 | | 1241100000 | IE-SW-PL16M-16TX | ≥ V3.4.18_Build_19062814 | | 1286820000 | IE-SW-PL16MT-16TX | ≥ V3.4.18_Build_19062814 | | 1241120000 | IE-SW-PL16M-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1286830000 | IE-SW-PL16MT-14TX-2SC | ≥ V3.4.18_Build_19062814 | | 1241130000 | IE-SW-PL16M-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1286840000 | IE-SW-PL16MT-14TX-2ST | ≥ V3.4.18_Build_19062814 | | 1241320000 | IE-SW-PL18M-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1286970000 | IE-SW-PL18MT-2GC-16TX | ≥ V3.4.30_Build_19062817 | | 1241330000 | IE-SW-PL18M-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1286990000 | IE-SW-PL18MT-2GC14TX2SC | ≥ V3.4.30_Build_19062817 | | 1241340000 | IE-SW-PL18M-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1287000000 | IE-SW-PL18MT-2GC14TX2ST | ≥ V3.4.30_Build_19062817 | | 1241350000 | IE-SW-PL18M-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1287010000 | IE-SW-PL18MT-2GC14TX2SCS | ≥ V3.4.30_Build_19062817 | | 1241370000 | IE-SW-PL09M-5GC-4GT | ≥ V3.3.20_Build_19070111 | | 1287020000 | IE-SW-PL09MT-5GC-4GT | ≥ V3.3.20_Build_19070111 |

  • FixedIE-SW-PL08M-6TX-2SC firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL08M-6TX-2SCS firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL08M-6TX-2ST firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL08M-8TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL08MT-6TX-2SC firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL08MT-6TX-2SCS firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL08MT-6TX-2ST firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL08MT-8TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL09M-5GC-4GT firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL09MT-5GC-4GT firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL10M-1GT-2GS-7TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL10M-3GT-7TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL10MT-1GT-2GS-7TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL10MT-3GT-7TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL16M-14TX-2SC firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL16M-14TX-2ST firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL16M-16TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL16MT-14TX-2SC firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL16MT-14TX-2ST firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL16MT-16TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL18M-2GC-16TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL18M-2GC14TX2SC firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL18M-2GC14TX2SCS firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL18M-2GC14TX2ST firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL18MT-2GC-16TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL18MT-2GC14TX2SC firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL18MT-2GC14TX2SCS firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-PL18MT-2GC14TX2ST firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-VL05M-3TX-2SC firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-VL05M-3TX-2ST firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-VL05M-5TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-VL05MT-3TX-2SC firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-VL05MT-3TX-2ST firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-VL05MT-5TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-VL08MT-5TX-1SC-2SCS firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-VL08MT-5TX-3SC firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-VL08MT-6TX-2SC firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-VL08MT-6TX-2SCS firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-VL08MT-6TX-2ST firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • FixedIE-SW-VL08MT-8TX firmwarecisa_csaf_ot

    IE-SW-PL18M-2GC14TX2SCS firmware v3.4.30 Build 19062817 and prior

  • MitigationIE-SW-PL08M-6TX-2SC firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL08M-6TX-2SCS firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL08M-6TX-2ST firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL08M-8TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL08MT-6TX-2SC firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL08MT-6TX-2SCS firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL08MT-6TX-2ST firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL08MT-8TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL09M-5GC-4GT firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL09MT-5GC-4GT firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL10M-1GT-2GS-7TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL10M-3GT-7TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL10MT-1GT-2GS-7TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL10MT-3GT-7TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL16M-14TX-2SC firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL16M-14TX-2ST firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL16M-16TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL16MT-14TX-2SC firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL16MT-14TX-2ST firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL16MT-16TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL18M-2GC-16TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL18M-2GC14TX2SC firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL18M-2GC14TX2SCS firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL18M-2GC14TX2ST firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL18MT-2GC-16TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL18MT-2GC14TX2SC firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL18MT-2GC14TX2SCS firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-PL18MT-2GC14TX2ST firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL05M-3TX-2SC firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL05M-3TX-2ST firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL05M-5TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL05MT-3TX-2SC firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL05MT-3TX-2ST firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL05MT-5TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL08MT-5TX-1SC-2SCS firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL08MT-5TX-3SC firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL08MT-6TX-2SC firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL08MT-6TX-2SCS firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL08MT-6TX-2ST firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

  • MitigationIE-SW-VL08MT-8TX firmwarecisa_csaf_ot

    After installing the patched firmware on the switch, it is possible to disable the unencrypted search service via Weidmueller configuration software named “WM Switch Utility” for Windows OS and to enable an encrypted search service, which will be working with the new “Weidmueller Switch Configuration Utility” (available soon).

02

cvss

Technical severity, 0–10. One row per scoring source.

9.8
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 5–9.8

v2.05mediumAV:N/AC:L/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 10 · impact 2.9
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9
v3.09.8criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US
v3.09.8criticalCVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:Nsecondary · ENISA EU
v3.09.8criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · cve@mitre.org USexploitability 3.9 · impact 5.9
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Weidmüller PSIRT DE
v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-319USprimaryCWE-522USprimaryCWE-311USCWE-311US
04

affected products (201)

Products and version ranges known to be affected.

showing 20 of 201
05

advisories (2)

Vendor and ecosystem advisories describing this.

  • VDE-2019-018Weidmueller: multiple vulnerabilities in various Industrial Ethernet managed switches2019-12-05csaf · weidmueller_psirtDE

    Multiple issues have been found. Please check the CVEs for details.

  • ICSA-19-339-02Weidmueller Industrial Ethernet Switches2019-12-05icsa · cisa_csaf_otUS

    Successful exploitation of these vulnerabilities could allow a remote attacker to gain unauthorized access to the device, affecting the confidentiality, integrity, and availability of the device the attacker is targeting.

06

also known as (3)

Other names and identifiers for this entity.

07

sources

Which sources assert this record, and when.

cnnvdenisa_euvdcisa_csaf_otweidmueller_psirtNVDCVE.orgMITRE
published 2019-12-06modified 2026-06-17
09

references (14)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan