Several Murrelektronik Devices use Default SNMP Community Names
Several Murrelektronik devices using Profinet are shipped with the default SNMP community names ('public' for read access and 'private' for write access). If these community strings remain unchanged in the field, an unauthenticated attacker with network access to the device can read its configuration and, depending on the writable OIDs, modify device settings.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-1999-0517US | high7.5 | Exploit | ||
An SNMP community name is the default (e.g. public), null, or missing. | ||||
references
External citations — patches, advisories, analysis.
- VDE-2026-062: Several Murrelektronik Devices use Default SNMP Community Names - HTMLself
- CERT@VDE Security Advisories for Murrelektronikexternal
- VDE-2026-062: Several Murrelektronik Devices use Default SNMP Community Names - CSAFself
- Murrelektronik Product Security Incident Response (PSIRT) Teamexternal
remediations (2)
- No fix planned
No fixed planned
- No fix available
A firmware update addressing the vulnerability is planned for early 2027 for the Impact67 Pro (article numbers 54620, 54630) and MVK Pro (article numbers 54600, 54610) product variants.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan