Direct naar inhoud
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

1

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 13:52.

Filters

1 actief
Reset filters

1 advisories gevonden

VDE-2026-063

Murrelektronik Devices Vulnerable to SNMP GETBULK Reflection DDoS

Murrelektronik — MVK

Murrelektronik PSIRThoog

Gepubliceerd

14 juli 2026

Laatste update

14 juli 2026

Gekoppelde CVE's

Getroffen sectoren

Risk evaluation

Multiple Murrelektronik network-enabled devices respond to SNMPv2c 'GETBULK' requests with disproportionately large response packets when the requesting party specifies a large max-repetitions value. This response amplification allows the affected devices to be misused as reflectors in distributed denial-of-service (DDoS) attacks against arbitrary third-party victims on the internet.

Mitigatiesamenvatting

A firmware update that addresses the SNMP GETBULK response amplification behaviour is planned for release in early 2027 for the Murrelektronik MVK Pro and Impact67 Pro product lines. Until the fix becomes available, customers should apply the mitigations described above.

Revisiegeschiedenis (1)
  1. Initiële publicatie — 14 juli 2026

    initial release

Officiële bron: Murrelektronik PSIRT