Several Murrelektronik Devices use Default SNMP Community Names
Several Murrelektronik devices using Profinet are shipped with the default SNMP community names ('public' for read access and 'private' for write access). If these community strings remain unchanged in the field, an unauthenticated attacker with network access to the device can read its configuration and, depending on the writable OIDs, modify device settings.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-1999-0517US | high7.5 | Exploit | ||
An SNMP community name is the default (e.g. public), null, or missing. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- VDE-2026-062: Several Murrelektronik Devices use Default SNMP Community Names - HTMLself
- CERT@VDE Security Advisories for Murrelektronikexternal
- VDE-2026-062: Several Murrelektronik Devices use Default SNMP Community Names - CSAFself
- Murrelektronik Product Security Incident Response (PSIRT) Teamexternal
Behebungen (2)
- Kein Fix geplant
No fixed planned
- Kein Fix verfügbar
A firmware update addressing the vulnerability is planned for early 2027 for the Impact67 Pro (article numbers 54620, 54630) and MVK Pro (article numbers 54600, 54610) product variants.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan