CVE-2021-33539
Status: ModifiedHigh (7.2)—
In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. A specially configured device hostname can cause the device to interpret selected remote traffic as local traffic, resulting in a bypass of web authentication. An attacker can send authenticated SNMP requests to trigger this vulnerability.
CVSS
- Version: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Base score: 7.2
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 1.06%
- Percentile among all scored CVEs: 63
- Score date: 10/6/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (8)
Weidmueller — Ie-wl-bl-ap-cl-eu FirmwareWeidmueller — Ie-wl-bl-ap-cl-us FirmwareWeidmueller — Ie-wl-vl-ap-br-cl-eu FirmwareWeidmueller — Ie-wl-vl-ap-br-cl-us FirmwareWeidmueller — Ie-wlt-bl-ap-cl-eu FirmwareWeidmueller — Ie-wlt-bl-ap-cl-us FirmwareWeidmueller — Ie-wlt-vl-ap-br-cl-eu FirmwareWeidmueller — Ie-wlt-vl-ap-br-cl-us Firmware
CWEs
- CWE-287
References
Raw JSON (NVD)
Show
{
"id": "CVE-2021-33539",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"authentication": "SINGLE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "info@cert.vde.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.2,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "HIGH",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.2
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.2,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "HIGH",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.2
}
]
},
"affected": [
{
"source": "info@cert.vde.com",
"affectedData": [
{
"vendor": "Weidmüller",
"product": "IE-WL(T)-BL-AP-CL-XX",
"versions": [
{
"status": "affected",
"version": "IE-WL-BL-AP-CL-EU (2536600000)",
"versionType": "custom",
"lessThanOrEqual": "V1.16.18 (Build 18081617)"
},
{
"status": "affected",
"version": "IE-WLT-BL-AP-CL-EU (2536650000)",
"versionType": "custom",
"lessThanOrEqual": "V1.16.18 (Build 18081617)"
},
{
"status": "affected",
"version": "IE-WL-BL-AP-CL-US (2536660000)",
"versionType": "custom",
"lessThanOrEqual": "V1.16.18 (Build 18081617)"
},
{
"status": "affected",
"version": "IE-WLT-BL-AP-CL-US (2536670000)",
"versionType": "custom",
"lessThanOrEqual": "V1.16.18 (Build 18081617)"
}
]
},
{
"vendor": "Weidmüller",
"product": "IE-WL(T)-VL-AP-CL-XX",
"versions": [
{
"status": "affected",
"version": "IE-WL-VL-AP-BR-CL-EU (2536680000)",
"versionType": "custom",
"lessThanOrEqual": "V1.11.10 (Build 18122616)"
},
{
"status": "affected",
"version": "IE-WLT-VL-AP-BR-CL-EU (2536690000)",
"versionType": "custom",
"lessThanOrEqual": "V1.11.10 (Build 18122616)"
},
{
"status": "affected",
"version": "IE-WL-VL-AP-BR-CL-US (2536700000)",
"versionType": "custom",
"lessThanOrEqual": "V1.11.10 (Build 18122616)"
},
{
"status": "affected",
"version": "IE-WLT-VL-AP-BR-CL-US (2536710000)",
"versionType": "custom",
"lessThanOrEqual": "V1.11.10 (Build 18122616)"
}
]
}
]
}
],
"published": "2021-06-25T19:15:09.633",
"references": [
{
"url": "https://cert.vde.com/en-us/advisories/vde-2021-026",
"tags": [
"Third Party Advisory"
],
"source": "info@cert.vde.com"
},
{
"url": "https://cert.vde.com/en-us/advisories/vde-2021-026",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "info@cert.vde.com",
"description": [
{
"lang": "en",
"value": "CWE-287"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. A specially configured device hostname can cause the device to interpret selected remote traffic as local traffic, resulting in a bypass of web authentication. An attacker can send authenticated SNMP requests to trigger this vulnerability."
},
{
"lang": "es",
"value": "En los dispositivos Weidmueller Industrial WLAN en múltiples versiones, se presenta una vulnerabilidad explotable de omisión de autenticación en el procesamiento del nombre de host. Un nombre de host del dispositivo especialmente configurado puede causar al dispositivo interpretar el tráfico remoto seleccionado como tráfico local, resultando en una omisión de la autenticación web. Un atacante puede enviar peticiones SNMP autenticadas para desencadenar esta vulnerabilidad"
}
],
"lastModified": "2026-06-17T03:54:45.063",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:weidmueller:ie-wl-bl-ap-cl-eu_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E409B45-BF28-41AD-B3A7-656FBAF9597D",
"versionEndIncluding": "1.16.18"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:weidmueller:ie-wl-bl-ap-cl-eu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "26A4612B-2370-42CA-8EC4-5C74382ABDA6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:weidmueller:ie-wlt-bl-ap-cl-eu_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17F26A4C-FDBA-48A8-AC05-1A779F0051F3",
"versionEndIncluding": "1.16.18"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:weidmueller:ie-wlt-bl-ap-cl-eu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FC895FDA-C846-4885-AADB-DED6EC868C3B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:weidmueller:ie-wl-bl-ap-cl-us_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C589467-C35D-43E8-AE06-9C0541DF2190",
"versionEndIncluding": "1.16.18"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:weidmueller:ie-wl-bl-ap-cl-us:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "97D7BBC3-6F43-47B5-81E2-431C8837BB3A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:weidmueller:ie-wlt-bl-ap-cl-us_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E1B5E87-7D1E-45FD-894C-31167B80BEB1",
"versionEndIncluding": "1.16.18"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:weidmueller:ie-wlt-bl-ap-cl-us:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6D38EC42-5C2E-4ACE-88A1-2890632E51DA"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:weidmueller:ie-wl-vl-ap-br-cl-eu_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C2C095A-F606-4A7A-9836-EAA17A648E50",
"versionEndIncluding": "1.16.18"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:weidmueller:ie-wl-vl-ap-br-cl-eu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "17790AD1-5DE3-47F4-A16C-67C7DFE56128"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:weidmueller:ie-wlt-vl-ap-br-cl-eu_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE71A6A8-3E2A-4EC3-A719-0AC48B99C1F5",
"versionEndIncluding": "1.16.18"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:weidmueller:ie-wlt-vl-ap-br-cl-eu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "23E4AE7D-CA1F-45FC-9D8F-725E71832D2A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:weidmueller:ie-wl-vl-ap-br-cl-us_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C171799A-4FEE-43F4-A7EE-8B1A52828FF7",
"versionEndIncluding": "1.16.18"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:weidmueller:ie-wl-vl-ap-br-cl-us:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2DED5CF2-3B42-4D92-9647-AC54D07C6B20"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:weidmueller:ie-wlt-vl-ap-br-cl-us_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF79779D-863D-4B8B-A4B4-BFD0F3528442",
"versionEndIncluding": "1.16.18"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:weidmueller:ie-wlt-vl-ap-br-cl-us:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1209D9A9-D6AA-44C3-AD34-18C145851D5B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:weidmueller:ie-wl-bl-ap-cl-eu_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6210516-CB15-4099-B91E-63AE16C71B17",
"versionEndIncluding": "1.11.10"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:weidmueller:ie-wl-bl-ap-cl-eu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "26A4612B-2370-42CA-8EC4-5C74382ABDA6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:weidmueller:ie-wlt-bl-ap-cl-eu_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93C19C9E-99C5-4D4F-8FC6-9038B105F64A",
"versionEndIncluding": "v1.11.10"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:weidmueller:ie-wlt-bl-ap-cl-eu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FC895FDA-C846-4885-AADB-DED6EC868C3B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:weidmueller:ie-wl-bl-ap-cl-us_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E865089B-638A-491A-9527-EB1A21C9A3D9",
"versionEndIncluding": "1.11.10"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:weidmueller:ie-wl-bl-ap-cl-us:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "97D7BBC3-6F43-47B5-81E2-431C8837BB3A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:weidmueller:ie-wlt-bl-ap-cl-us_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A3DCCA5-38A5-4661-8EA5-5DB21C92DA56",
"versionEndIncluding": "1.11.10"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:weidmueller:ie-wlt-bl-ap-cl-us:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6D38EC42-5C2E-4ACE-88A1-2890632E51DA"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:weidmueller:ie-wl-vl-ap-br-cl-eu_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B455D775-9B0E-4DCF-BDA6-0861F5C34362",
"versionEndIncluding": "1.11.10"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:weidmueller:ie-wl-vl-ap-br-cl-eu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "17790AD1-5DE3-47F4-A16C-67C7DFE56128"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:weidmueller:ie-wlt-vl-ap-br-cl-eu_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE88298B-D13E-4B19-8C77-15FB57FC4A9A",
"versionEndIncluding": "1.11.10"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:weidmueller:ie-wlt-vl-ap-br-cl-eu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "23E4AE7D-CA1F-45FC-9D8F-725E71832D2A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:weidmueller:ie-wl-vl-ap-br-cl-us_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D71C498-B58B-4FDC-AA9F-508D61F03E8B",
"versionEndIncluding": "1.11.10"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:weidmueller:ie-wl-vl-ap-br-cl-us:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2DED5CF2-3B42-4D92-9647-AC54D07C6B20"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:weidmueller:ie-wlt-vl-ap-br-cl-us_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16DA2FEB-D762-44C1-9C45-3FC6017CE1D7",
"versionEndIncluding": "1.11.10"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:weidmueller:ie-wlt-vl-ap-br-cl-us:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1209D9A9-D6AA-44C3-AD34-18C145851D5B"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "info@cert.vde.com"
}