WEIDMUELLER: WLAN devices affected by improper access control vulnerability

Vulnerability

In Weidmueller Industrial WLAN devices (multiple versions), the iw_webs account settings functionality contains an improper access control vulnerability. A specially crafted user name entry can cause the overwrite of an existing user account password. This allows an attacker to gain remote shell access as that user. Affected versions are not explicitly listed but cover multiple versions.

Exploitation

An attacker must be authenticated as a low privilege user on the device. They can send commands to trigger the vulnerability by providing a crafted user name in the account settings functionality. No additional network position or user interaction is required beyond authentication.

Impact

Successful exploitation results in the overwrite of an existing user account password, granting the attacker remote shell access to the device as that user. The attacker gains the privileges of the overwritten user, potentially leading to full device compromise.

Mitigation

Not yet disclosed in the available references [1]. Users should monitor vendor advisories for updates.