| Publisher: Weidmueller Interface GmbH & Co. KG | Document category: csaf_security_advisory |
| Initial release date: 2026-11-10T10:00:00.000Z | Engine: Secvisogram 2.6.16 |
| Current release date: 2026-11-10T10:00:00.000Z | Build Date: 2026-11-09T17:45:13.548Z |
| Current version: 1.0.0 | Status: final |
| CVSSv3.1 Base Score: 9.8 | Severity: Medium |
| Original language: | Language: en-GB |
| Also referred to: VDE-2026-152, WMSA-2600006 | |
The Weidmueller security routers IE-SR-4TX and IE-SR-4GT in firmware releases prior to 2.3.4 bundle a PHP version that is affected by CVE-2026-109618. In the configuration used by the products, the vulnerability can allow an attacker to cause a denial of service by making the web interface temporarily unavailable. All other functions (Routing, Firewall etc.) are not affected. It is fixed in firmware 2.3.4. CVE-2026-109619, which was published together with CVE-2026-109618, does not affect the products.
As a general security measure, Weidmueller strongly recommends to change the default passwords and to minimize the network exposure of products. Limit access to trusted networks by using the appropriate mechanisms.
An unauthenticated remote attacker with network access to the web interface can make it temporarily unavailable. Confidentiality and integrity are not affected; only availability of the web interface is impacted.
Restrict access to the web interface to trusted networks.
Update to version 2.3.4 or later.
| Product | Article Number | Firmware File Name | Affected Version | Fixed Version |
|---|---|---|---|---|
| IE-SR-4TX | 2751270000 | Firmware_IE-SR-4TX_series | <2.3.4 | 2.3.4 |
| IE-SR-4TX-LTE/4G-EU | 2751280000 | Firmware_IE-SR-4TX_series | <2.3.4 | 2.3.4 |
| IE-SR-4TX-LTE/4G-USEMEA | 2739630000 | Firmware_IE-SR-4TX_series | <2.3.4 | 2.3.4 |
| IE-SR-4GT | 2873910000 | Firmware_IE-SR-4GT_series | <2.3.4 | 2.3.4 |
| IE-SR-4GT-LTE/4G-EU | 2873920000 | Firmware_IE-SR-4GT_series | <2.3.4 | 2.3.4 |
| IE-SR-4GT-LTE/4G-USEMEA | 2873930000 | Firmware_IE-SR-4GT_series | <2.3.4 | 2.3.4 |
| IE-SR-4GT-M | 2990450000 | Firmware_IE-SR-4GT_series | <2.3.4 | 2.3.4 |
| IE-SR-4GT-LTE/4G-USEMEA-M | 2990440000 | Firmware_IE-SR-4GT_series | <2.3.4 | 2.3.4 |
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).
| CVSS Score: | 5.3 (MEDIUM) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
|---|---|
| CWE: | CWE-755: Improper Handling of Exceptional Conditions |
Known affected
Fixed
Restrict access to the web interface to trusted networks.
Update to firmware 2.3.4 or later.
References
Namespace: https://www.weidmueller.com
psirt@weidmueller.com
| Version | Date of the revision | Summary of the revision |
|---|---|---|
| 1.0.0 | 2026-11-10T10:00:00.000Z | Initial version |
TLP:WHITE
For the TLP version see: https://www.first.org/tlp/