WEIDMUELLER: WLAN devices affected by Denial-of-Service vulnerability

Vulnerability

An exploitable denial-of-service vulnerability exists in the ServiceAgent functionality of multiple versions of Weidmueller Industrial WLAN devices. A specially crafted network packet can cause an integer underflow, which triggers a large memcpy operation that accesses unmapped or out-of-bounds memory. The vulnerable code path is reachable without authentication [1].

Exploitation

An attacker can send a specially crafted packet to the affected device over the network without any prior authentication. No special network position or user interaction is required. The packet causes an integer underflow in the ServiceAgent, leading to a large memcpy that reads from or writes to unmapped or out-of-bounds memory [1].

Impact

Successful exploitation results in a denial-of-service condition, as the memory access violation crashes the service or the device itself. The attacker does not gain code execution or data access; the impact is limited to availability [1].

Mitigation

The advisory from VDE (VDE-2021-026) does not disclose a fixed version or release date at the time of publication. Users should monitor the vendor's security advisories for updates. No workarounds are provided in the available references [1].