WEIDMUELLER: WLAN devices affected by authentication bypass vulnerability

Vulnerability

In Weidmueller Industrial WLAN devices across multiple versions, an authentication bypass vulnerability exists in the hostname processing logic. A specially configured device hostname can cause the device to interpret selected remote traffic as local traffic, thereby bypassing web authentication. The vulnerability is triggered via authenticated SNMP requests.

Exploitation

An attacker with network access and valid SNMP credentials can send specially crafted SNMP requests to set a malicious hostname on the device. This hostname causes the device to treat subsequent remote web traffic as locally originating, bypassing the web authentication mechanism.

Impact

Successful exploitation allows the attacker to bypass authentication and gain unauthorized access to the device's web interface, potentially leading to full device compromise and network exposure.

Mitigation

No mitigation information is provided in the available references. Users should contact the vendor for security updates.