WEIDMUELLER: WLAN devices affected by Remote Code Execution (RCE) vulnerability

Vulnerability

In Weidmueller Industrial WLAN devices (multiple versions), the iw_webs configuration parsing functionality contains a buffer overflow vulnerability. A specially crafted user name entry can cause an overflow of an error message buffer, leading to remote code execution [1]. The affected versions are not explicitly listed in the available reference, but the advisory covers multiple versions.

Exploitation

An attacker must first authenticate as a low-privilege user to the device. Once authenticated, the attacker can send a specially crafted user name entry during configuration parsing. This triggers a buffer overflow in the error message buffer, allowing the attacker to execute arbitrary code [1].

Impact

Successful exploitation results in remote code execution with the privileges of the affected process. The attacker can gain full control over the device, potentially leading to complete compromise of confidentiality, integrity, and availability.

Mitigation

As of the publication date (2021-06-25), no specific fix version or workaround has been disclosed in the available reference [1]. Users are advised to monitor the vendor's advisory for updates and apply patches when available.