CVE-2021-33532

CVE-2021-33532 is a critical command injection vulnerability affecting Weidmueller Industrial WLAN devices. An authenticated, low-privilege attacker can exploit a flaw in the iw_webs functionality by crafting a malicious diagnostic script file name, leading to remote code execution. This vulnerability carries a high CVSS score of 8.8, indicating a severe risk with potential for complete compromise of confidentiality, integrity, and availability. While no public exploits or active exploitation have been observed, and community discussion is minimal, organizations using affected Weidmueller devices should prioritize patching to mitigate this significant threat.