CISA + leveranciers
ICS Advisories
Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.
1
Gevonden
Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 13:52.
Filters
1 actief1 advisories gevonden
VDE-2025-091
Murrelektronik: Cleartext Transmission of Sensitive Information in IMPACT67 Pro
Gepubliceerd
14 oktober 2025
Laatste update
14 oktober 2025
Gekoppelde CVE's
Getroffen sectoren
Risk evaluation
The embedded web interface of the MURRELEKTRONIK IMPACT67 Pro PN DIO8 IOL8 transmits login credentials over unencrypted HTTP using a GET request. The device does not offer HTTPS/TLS support, exposing user credentials to passive interception by any attacker on the same network.
Mitigatiesamenvatting
Murrelektronik recommends: * Deactivating the Webserver will prevent any data from being sent unencrypted. More information on how to disable the webserver can be found in the manual. * Deactivating all unused network ports in the unit will prevent data sniffing. * Segmenting the network strictly helps to minimize unauthorized access to network traffic. If the webserver must stay activated, this is recommended to reduce the security breaches impact. * Advise users of the system to not use personal data or standard passwords for the webserver accounts. This helps to prevent personal data leakage.
Revisiegeschiedenis (1)
Initiële publicatie — 14 oktober 2025
initial release