Strix
26.1K

CVE-2019-16673

MEDIUMCVSS 6.5/10EPSS 1.11%

Last modified

CVE-2019-16673 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Passwords are stored in cleartext and can be read by anyone with access to the device.. EPSS estimates a 1.11% chance of exploitation in the next 30 days.

Description

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Passwords are stored in cleartext and can be read by anyone with access to the device.

Metrics

CVSS 3.1
6.5/10

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Probability
1.11%

61.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
WeidmuellerIe-Sw-Pl09m-5gc-4gt Firmware<= 3.3.4
WeidmuellerIe-Sw-Pl09mt-5gc-4gt Firmware<= 3.3.4
WeidmuellerIe-Sw-Pl18m-2gc-16tx Firmware<= 3.4.4
WeidmuellerIe-Sw-Pl18mt-2gc-16tx Firmware<= 3.4.4
WeidmuellerIe-Sw-Pl18m-2gc14tx2sc Firmware<= 3.4.4
WeidmuellerIe-Sw-Pl18mt-2gc14tx2sc Firmware<= 3.4.4
WeidmuellerIe-Sw-Pl18m-2gc14tx2st Firmware<= 3.4.4
WeidmuellerIe-Sw-Pl18mt-2gc14tx2st Firmware<= 3.4.4
WeidmuellerIe-Sw-Pl18m-2gc14tx2scs Firmware<= 3.4.4
WeidmuellerIe-Sw-Pl18mt-2gc14tx2scs Firmware<= 3.4.4
WeidmuellerIe-Sw-Pl16m-16tx Firmware<= 3.4.2
WeidmuellerIe-Sw-Pl16mt-16tx Firmware<= 3.4.2
WeidmuellerIe-Sw-Pl16m-14tx-2sc Firmware<= 3.4.2
WeidmuellerIe-Sw-Pl16mt-14tx-2sc Firmware<= 3.4.2
WeidmuellerIe-Sw-Pl16m-14tx-2st Firmware<= 3.4.2
WeidmuellerIe-Sw-Pl16mt-14tx-2st Firmware<= 3.4.2
WeidmuellerIe-Sw-Vl05m-5tx Firmware<= 3.6.6
WeidmuellerIe-Sw-Vl05mt-5tx Firmware<= 3.6.6
WeidmuellerIe-Sw-Vl05m-3tx-2sc Firmware<= 3.6.6
WeidmuellerIe-Sw-Vl05mt-3tx-2sc Firmware<= 3.6.6
WeidmuellerIe-Sw-Vl05m-3tx-2st Firmware<= 3.6.6
WeidmuellerIe-Sw-Vl05mt-3tx-2st Firmware<= 3.6.6
WeidmuellerIe-Sw-Vl08mt-8tx Firmware<= 3.5.2
WeidmuellerIe-Sw-Vl08mt-5tx-3sc Firmware<= 3.5.2
WeidmuellerIe-Sw-Vl08mt-5tx-1sc-2scs Firmware<= 3.5.2
WeidmuellerIe-Sw-Vl08mt-6tx-2st Firmware<= 3.5.2
WeidmuellerIe-Sw-Vl08mt-6tx-2sc Firmware<= 3.5.2
WeidmuellerIe-Sw-Vl08mt-6tx-2scs Firmware<= 3.5.2
WeidmuellerIe-Sw-Pl08m-8tx Firmware<= 3.3.8
WeidmuellerIe-Sw-Pl08mt-8tx Firmware<= 3.3.8
WeidmuellerIe-Sw-Pl08m-6tx-2sc Firmware<= 3.3.8
WeidmuellerIe-Sw-Pl08mt-6tx-2sc Firmware<= 3.3.8
WeidmuellerIe-Sw-Pl08m-6tx-2st Firmware<= 3.3.8
WeidmuellerIe-Sw-Pl08mt-6tx-2st Firmware<= 3.3.8
WeidmuellerIe-Sw-Pl08m-6tx-2scs Firmware<= 3.3.8
WeidmuellerIe-Sw-Pl08mt-6tx-2scs Firmware<= 3.3.8
WeidmuellerIe-Sw-Pl10m-3gt-7tx Firmware<= 3.3.16
WeidmuellerIe-Sw-Pl10mt-3gt-7tx Firmware<= 3.3.16
WeidmuellerIe-Sw-Pl10m-1gt-2gs-7tx Firmware<= 3.3.16
WeidmuellerIe-Sw-Pl10mt-1gt-2gs-7tx Firmware<= 3.3.16

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2019-16673?
An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Passwords are stored in cleartext and can be read by anyone with access to the device.
How severe is CVE-2019-16673?
CVE-2019-16673 has a CVSS score of 6.5/10 (MEDIUM severity). The EPSS model estimates a 1.11% probability of exploitation in the next 30 days.
How do I fix CVE-2019-16673?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-16673?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST