CVE-2021-33537

CVE-2021-33537 is a remote code execution vulnerability affecting Weidmueller Industrial WLAN devices, specifically within the iw_webs configuration parsing functionality. An authenticated low-privilege attacker can exploit a buffer overflow in an error message by crafting a malicious username entry. This vulnerability carries a high CVSS score of 8.8, indicating high impact on confidentiality, integrity, and availability, with a low attack complexity. While no public exploit intelligence like Metasploit modules or ExploitDB entries exist, and there's minimal community discussion or media coverage, its high EPSS score suggests a non-negligible probability of exploitation.