CVE-2021-33536

HIGH

Weidmueller Industrial WLAN Firmware < 1.16.18 - Unauthenticated Denial of Service via ServiceAgent Integer Underflow

Title source: llm

Description

In Weidmueller Industrial WLAN devices in multiple versions an exploitable denial-of-service vulnerability exists in ServiceAgent functionality. A specially crafted packet can cause an integer underflow, triggering a large memcpy that will access unmapped or out-of-bounds memory. An attacker can send this packet while unauthenticated to trigger this vulnerability.

References (1)

Core 1

Core References

Third Party Advisory x_refsource_confirm

https://cert.vde.com/en-us/advisories/vde-2021-026

Scores

CVSS v3 7.5

EPSS 0.0104

EPSS Percentile 59.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-191

Status published

Products (8)

weidmueller/ie-wl-bl-ap-cl-eu_firmware < 1.16.18

weidmueller/ie-wl-bl-ap-cl-us_firmware < 1.16.18

weidmueller/ie-wl-vl-ap-br-cl-eu_firmware < 1.16.18

weidmueller/ie-wl-vl-ap-br-cl-us_firmware < 1.16.18

weidmueller/ie-wlt-bl-ap-cl-eu_firmware < 1.16.18

weidmueller/ie-wlt-bl-ap-cl-us_firmware < 1.16.18

weidmueller/ie-wlt-vl-ap-br-cl-eu_firmware < 1.16.18

weidmueller/ie-wlt-vl-ap-br-cl-us_firmware < 1.16.18

Published Jun 25, 2021

Tracked Since Feb 18, 2026