CVE-2021-33538

highpriority · track · 35EPSS 0.010 · 64 %ileDEEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

1.05% (64th) EPSS

CVSS 9 · high

Is it mine?

40 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · nvd · weidmueller_psirt

EPSS · scored 2026-10-27

In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs account settings functionality. A specially crafted user name entry can cause the overwrite of an existing user account password, resulting in remote shell access to the device as that user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedweidmueller_psirt
For all potential vulnerabilities, customers can download a patched firmware to secure their Industrial WLAN devices properly. Please follow the procedure below to download and install the latest firmware for your device: 1. Use the link: [www.weidmueller.com](www.weidmueller.com) 2. Enter the product number of the Industrial WLAN device you want to update in the search field on the webpage and press "Enter". 3. On the next page, expand the drop-down menu **"Downloads"**. 4. Download the respective firmware from the download table. 5. Install the firmware on your device. Patched firmware versions for all affected products | Product number | Product name | Firmware version | |---------------|-----------------------------------|------------------------------------------| | 2536600000 | IE-WL-BL-AP-CL-EU | <= V1.16.21 (Build 21010513) | | 2536650000 | IE-WLT-BL-AP-CL-EU | <= V1.16.21 (Build 21010513) | | 2536660000 | IE-WL-BL-AP-CL-US | <= V1.16.21 (Build 21010513) | | 2536670000 | IE-WLT-BL-AP-CL-US | <= V1.16.21 (Build 21010513) | | 2536680000 | IE-WL-VL-AP-BR-CL-EU | <= V1.11.13 (Build 21010513) | | 2536690000 | IE-WLT-VL-AP-BR-CL-EU | <= V1.11.13 (Build 21010513) | | 2536700000 | IE-WL-VL-AP-BR-CL-US | <= V1.11.13 (Build 21010513) | | 2536710000 | IE-WLT-VL-AP-BR-CL-US | <= V1.11.13 (Build 21010513) | If a firmware update is available for your device, please follow the steps above to install it.

cvss

Technical severity, 0–10. One row per scoring source.

9.0

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.09highAV:N/AC:L/Au:S/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 8 · impact 10

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 2.8 · impact 5.9

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · info@cert.vde.comexploitability 2.8 · impact 5.9

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · Weidmüller PSIRT DE

v3.18.1highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-269USCWE-269US

affected products (40)

Products and version ranges known to be affected.

Weidmüller IE-WL(T)-BL-AP-CL-XX≤ IE-WL-BL-AP-CL-US (2536660000) ≤V1.16.18 (Build 18081617)enisa_euvdEU
Weidmüller IE-WL(T)-BL-AP-CL-XX≤ IE-WLT-BL-AP-CL-EU (2536650000) ≤V1.16.18 (Build 18081617)enisa_euvdEU
Weidmüller IE-WL(T)-BL-AP-CL-XX≤ IE-WL-BL-AP-CL-EU (2536600000) ≤V1.16.18 (Build 18081617)enisa_euvdEU
Weidmüller IE-WL(T)-BL-AP-CL-XX≤ IE-WLT-BL-AP-CL-US (2536670000) ≤V1.16.18 (Build 18081617)enisa_euvdEU
Weidmüller IE-WL(T)-VL-AP-CL-XX≤ IE-WL-VL-AP-BR-CL-EU (2536680000) ≤V1.11.10 (Build 18122616)enisa_euvdEU
Weidmüller IE-WL(T)-VL-AP-CL-XX≤ IE-WL-VL-AP-BR-CL-US (2536700000) ≤V1.11.10 (Build 18122616)enisa_euvdEU
Weidmüller IE-WL(T)-VL-AP-CL-XX≤ IE-WLT-VL-AP-BR-CL-EU (2536690000) ≤V1.11.10 (Build 18122616)enisa_euvdEU
Weidmüller IE-WL(T)-VL-AP-CL-XX≤ IE-WLT-VL-AP-BR-CL-US (2536710000) ≤V1.11.10 (Build 18122616)enisa_euvdEU
weidmueller ie-wl-bl-ap-cl-eu firmware≤ 1.16.18nvdUScpe:2.3:o:weidmueller:ie-wl-bl-ap-cl-eu_firmware:*:*:*:*:*:*:*:*
weidmueller ie-wl-bl-ap-cl-eu firmware≤ 1.11.10nvdUScpe:2.3:o:weidmueller:ie-wl-bl-ap-cl-eu_firmware:*:*:*:*:*:*:*:*
weidmueller ie-wl-bl-ap-cl-us firmware≤ 1.16.18nvdUScpe:2.3:o:weidmueller:ie-wl-bl-ap-cl-us_firmware:*:*:*:*:*:*:*:*
weidmueller ie-wl-bl-ap-cl-us firmware≤ 1.11.10nvdUScpe:2.3:o:weidmueller:ie-wl-bl-ap-cl-us_firmware:*:*:*:*:*:*:*:*
weidmueller ie-wl-vl-ap-br-cl-eu firmware≤ 1.11.10nvdUScpe:2.3:o:weidmueller:ie-wl-vl-ap-br-cl-eu_firmware:*:*:*:*:*:*:*:*
weidmueller ie-wl-vl-ap-br-cl-eu firmware≤ 1.16.18nvdUScpe:2.3:o:weidmueller:ie-wl-vl-ap-br-cl-eu_firmware:*:*:*:*:*:*:*:*
weidmueller ie-wl-vl-ap-br-cl-us firmware≤ 1.11.10nvdUScpe:2.3:o:weidmueller:ie-wl-vl-ap-br-cl-us_firmware:*:*:*:*:*:*:*:*
weidmueller ie-wl-vl-ap-br-cl-us firmware≤ 1.16.18nvdUScpe:2.3:o:weidmueller:ie-wl-vl-ap-br-cl-us_firmware:*:*:*:*:*:*:*:*
weidmueller ie-wlt-bl-ap-cl-eu firmware≤ 1.16.18nvdUScpe:2.3:o:weidmueller:ie-wlt-bl-ap-cl-eu_firmware:*:*:*:*:*:*:*:*
weidmueller ie-wlt-bl-ap-cl-eu firmware≤ 1.11.10nvdUScpe:2.3:o:weidmueller:ie-wlt-bl-ap-cl-eu_firmware:*:*:*:*:*:*:*:*
weidmueller ie-wlt-bl-ap-cl-us firmware≤ 1.16.18nvdUScpe:2.3:o:weidmueller:ie-wlt-bl-ap-cl-us_firmware:*:*:*:*:*:*:*:*
weidmueller ie-wlt-bl-ap-cl-us firmware≤ 1.11.10nvdUScpe:2.3:o:weidmueller:ie-wlt-bl-ap-cl-us_firmware:*:*:*:*:*:*:*:*

showing 20 of 40

advisories (1)

Vendor and ecosystem advisories describing this.

VDE-2021-026Weidmueller: Multiple vulnerabilities in Industrial WLAN devices2021-06-23csaf · weidmueller_psirtDE
Multiple issues in Weidmueller Industrial WLAN devices have been found. Initial publication date: 2021-06-23 Update A publication date: 2021-07-02 Update A CVE-2021-33534 CVSS: 7.2 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Description: An exploitable command injection vulnerability exists in the hostname functionality of Weidmueller Industrial WLAN devices. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device. An attacker can send various requests while authenticated as a high privilege user to trigger this vulnerability.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd weidmueller_psirt NVD CVE.org MITRE

published 2021-06-25modified 2026-06-17

references (3)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan