WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability

Vulnerability

A command injection vulnerability exists in the hostname functionality of multiple versions of Weidmueller Industrial WLAN devices. The vulnerability is documented in VDE advisory [1]. An attacker who is authenticated as a high-privilege user can inject arbitrary system commands by providing a specially crafted entry to network configuration information. The affected versions include various models and firmware versions, as noted in the advisory.

Exploitation

To exploit this vulnerability, an attacker must have network access to the device and be authenticated with high-privilege credentials. The attacker then sends a crafted request to modify the network configuration, specifically the hostname field, which is not properly sanitized. This triggers command injection, allowing the attacker to execute arbitrary system commands on the device.

Impact

Successful exploitation grants the attacker full control of the device. This includes the ability to execute arbitrary commands with system-level privileges, leading to complete compromise of confidentiality, integrity, and availability of the device and potentially the network it serves.

Mitigation

As of the publication date (2021-06-25), no specific fix version has been disclosed in the available references. Users are advised to contact Weidmueller for updated firmware or apply network segmentation and access controls to limit exposure. The device may be listed in CISA's Known Exploited Vulnerabilities catalog if applicable; check for updates.