CVE-2019-16672

An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices

Critical · published December 6, 2019

CVSS v3.0
9.8
EPSS
1%
Percentile
69.9
In the wild
Unconfirmed
What it is

🚨 Sensitive credentials just riding the network like they own the place! On Weidmueller IE-SW devices, important data hits the wire in cleartext, leaving you exposed. 🔥 Think of it as sending a postcard instead of a sealed letter—anyone can read it while it’s being delivered! Without proper encryption, your sensitive information is just floating around in plain sight. An attacker could intercept these unencrypted credentials in transit, potentially gaining unauthorized access to critical systems. This could lead to a full system compromise, exposing sensitive data that could wreak havoc on your operations.

Put simply

Think of it as sending a postcard instead of a sealed letter—anyone can read it while it’s being delivered! Without proper encryption, your sensitive information is just floating around in plain sight. This vulnerability allows sensitive credential data to be transmitted in cleartext rather than being encrypted, making it easy for attackers to eavesdrop on the communication.

What to do

An attacker could intercept these unencrypted credentials in transit, potentially gaining unauthorized access to critical systems. This could lead to a full system compromise, exposing sensitive data that could wreak havoc on your operations. Immediately implement encryption protocols to secure sensitive data during transmission. Additionally, consider upgrading to the latest firmware versions that address this issue, specifically versions released after 3.6.6 Build 16102415 and 3.5.2 Build 16102415. You've got this! With the right encryption measures, you can keep your credentials safe and sound! 🛡️

The record
Technical detail
CVSS v3.0
9.8 · CRITICAL
Vector
CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.01284 · 69.9th percentile
Published
2019-12-06T17:07Z
EPSS history
Timeline
  • 06 DEC 17:07Z
    An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices
    cvelistv5