Strix
26.1K

CVE-2019-16670

CRITICALCVSS 9.8/10EPSS 1.98%

Last modified

CVE-2019-16670 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. The Authentication mechanism has no brute-force prevention.. EPSS estimates a 1.98% chance of exploitation in the next 30 days.

Description

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. The Authentication mechanism has no brute-force prevention.

Metrics

CVSS 3.1
9.8/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
1.98%

78.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
WeidmuellerIe-Sw-Pl09m-5gc-4gt Firmware<= 3.3.4
WeidmuellerIe-Sw-Pl09mt-5gc-4gt Firmware<= 3.3.4
WeidmuellerIe-Sw-Pl18m-2gc-16tx Firmware<= 3.4.4
WeidmuellerIe-Sw-Pl18mt-2gc-16tx Firmware<= 3.4.4
WeidmuellerIe-Sw-Pl18m-2gc14tx2sc Firmware<= 3.4.4
WeidmuellerIe-Sw-Pl18mt-2gc14tx2sc Firmware<= 3.4.4
WeidmuellerIe-Sw-Pl18m-2gc14tx2st Firmware<= 3.4.4
WeidmuellerIe-Sw-Pl18mt-2gc14tx2st Firmware<= 3.4.4
WeidmuellerIe-Sw-Pl18m-2gc14tx2scs Firmware<= 3.4.4
WeidmuellerIe-Sw-Pl18mt-2gc14tx2scs Firmware<= 3.4.4
WeidmuellerIe-Sw-Pl16m-16tx Firmware<= 3.4.2
WeidmuellerIe-Sw-Pl16mt-16tx Firmware<= 3.4.2
WeidmuellerIe-Sw-Pl16m-14tx-2sc Firmware<= 3.4.2
WeidmuellerIe-Sw-Pl16mt-14tx-2sc Firmware<= 3.4.2
WeidmuellerIe-Sw-Pl16m-14tx-2st Firmware<= 3.4.2
WeidmuellerIe-Sw-Pl16mt-14tx-2st Firmware<= 3.4.2
WeidmuellerIe-Sw-Vl05m-5tx Firmware<= 3.6.6
WeidmuellerIe-Sw-Vl05mt-5tx Firmware<= 3.6.6
WeidmuellerIe-Sw-Vl05m-3tx-2sc Firmware<= 3.6.6
WeidmuellerIe-Sw-Vl05mt-3tx-2sc Firmware<= 3.6.6
WeidmuellerIe-Sw-Vl05m-3tx-2st Firmware<= 3.6.6
WeidmuellerIe-Sw-Vl05mt-3tx-2st Firmware<= 3.6.6
WeidmuellerIe-Sw-Vl08mt-8tx Firmware<= 3.5.2
WeidmuellerIe-Sw-Vl08mt-5tx-3sc Firmware<= 3.5.2
WeidmuellerIe-Sw-Vl08mt-5tx-1sc-2scs Firmware<= 3.5.2
WeidmuellerIe-Sw-Vl08mt-6tx-2st Firmware<= 3.5.2
WeidmuellerIe-Sw-Vl08mt-6tx-2sc Firmware<= 3.5.2
WeidmuellerIe-Sw-Vl08mt-6tx-2scs Firmware<= 3.5.2
WeidmuellerIe-Sw-Pl08m-8tx Firmware<= 3.3.8
WeidmuellerIe-Sw-Pl08mt-8tx Firmware<= 3.3.8
WeidmuellerIe-Sw-Pl08m-6tx-2sc Firmware<= 3.3.8
WeidmuellerIe-Sw-Pl08mt-6tx-2sc Firmware<= 3.3.8
WeidmuellerIe-Sw-Pl08m-6tx-2st Firmware<= 3.3.8
WeidmuellerIe-Sw-Pl08mt-6tx-2st Firmware<= 3.3.8
WeidmuellerIe-Sw-Pl08m-6tx-2scs Firmware<= 3.3.8
WeidmuellerIe-Sw-Pl08mt-6tx-2scs Firmware<= 3.3.8
WeidmuellerIe-Sw-Pl10m-3gt-7tx Firmware<= 3.3.16
WeidmuellerIe-Sw-Pl10mt-3gt-7tx Firmware<= 3.3.16
WeidmuellerIe-Sw-Pl10m-1gt-2gs-7tx Firmware<= 3.3.16
WeidmuellerIe-Sw-Pl10mt-1gt-2gs-7tx Firmware<= 3.3.16

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2019-16670?
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. The Authentication mechanism has no brute-force prevention.
How severe is CVE-2019-16670?
CVE-2019-16670 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 1.98% probability of exploitation in the next 30 days.
How do I fix CVE-2019-16670?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-16670?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST