WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability

Vulnerability

The vulnerability is a command injection in the iw_webs functionality of Weidmueller Industrial WLAN devices (multiple versions). A specially crafted diagnostic script file name causes user input to be reflected in a subsequent iw_system call, allowing injection of arbitrary commands. The affected versions are not specified beyond "multiple versions" in the advisory.

Exploitation

An attacker must be authenticated as a low-privilege user on the device. The attacker sends a specially crafted diagnostic script file name that includes malicious commands. This input is then passed to the iw_system function, which executes the injected commands. No additional user interaction is required beyond the initial authentication.

Impact

Successful exploitation allows the attacker to execute arbitrary commands on the device, leading to full remote control. The attacker can achieve command execution with the privileges of the iw_system call, effectively gaining root-level access to the device. This compromises confidentiality, integrity, and availability.

Mitigation

No fix has been publicly disclosed in the available references. Users should monitor vendor advisories for updates. As a workaround, restrict network access to the device and limit low-privilege user accounts.