Murrelektronik PSIRT (CSAF)
advisoryDEmurrelektronik_psirt
Murrelektronik PSIRT CSAF 2.0 advisories (hosted by CERT@VDE).
01
advisories (5)
Vendor and ecosystem advisories describing this.
02
product assertions (131)
Products and version ranges known to be affected.
- Firmware Cube20 vers:all/* installed on Cube20 BN-PNIO DI8
- Firmware Cube20 vers:all/* installed on Cube20 Cube67+ BN-PNIO
- Firmware Cube20 vers:all/* installed on Cube20S Profinet IO Bus node
- Firmware Impact67 Pro <=V1.9.1 installed on IMPACT67 Pro PN DIO8 IOL8 M12L 4P
- Firmware Impact67 Pro <=V1.9.1 installed on IMPACT67 Pro PN DIO8 IOL8 M12L 5P
- Firmware Impact67 vers:all/* installed on IMPACT67 PN DI16 M12L 4P
- Firmware Impact67 vers:all/* installed on IMPACT67 PN DI16 M12L 5P
- Firmware Impact67 vers:all/* installed on IMPACT67 PN DI8 DO8 M12L 4P
- Firmware Impact67 vers:all/* installed on IMPACT67 PN DI8 DO8 M12L 5P
- Firmware Impact67 vers:all/* installed on IMPACT67 PN DO16 M12L 4P
- Firmware Impact67 vers:all/* installed on IMPACT67 PN DO16 M12L 5P
- Firmware Impact67 vers:all/* installed on Impact67 MVK MPNIO DI16 M12L 5P
- Firmware Impact67 vers:all/* installed on Impact67 MVK MPNIO DI8 DO8 M12L 5P
- Firmware Impact67 vers:all/* installed on Impact67 MVK MPNIO DO16 M12L 5P
- Firmware Impact67 vers:all/* installed on Impact67 PN DI16
- Firmware Impact67 vers:all/* installed on Impact67 PN DI8 DO8/2
- Firmware Impact67 vers:all/* installed on Impact67 PN DIO12 DIO4/IOL4 M12L 4P
- Firmware Impact67 vers:all/* installed on Impact67 PN DIO12 DIO4/IOL4 M12L 5P
- Firmware Impact67 vers:all/* installed on Impact67 PN DIO12 IOL4 IRT
- Firmware Impact67 vers:all/* installed on Impact67 PN DIO14 DIO2/IOL2 M12L 4P
showing 20 of 131
03
CVE links (5)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-94293US | critical9.8OT high | Exploit | ||
An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints. | ||||
| CVE-2026-8173US | medium5.3 | — | ||
The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresse… | ||||
| CVE-2025-41718US | —OT elevated | — | ||
A cleartext transmission of sensitive information vulnerability in the affected products allows an unauthorized remote attacker to gain login credentials and access the Web-UI. | ||||
| CVE-2008-4309US | medium5.0 | — | ||
Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and 5.2 before 5.2.5.1 allows remote attacke… | ||||
| CVE-1999-0517US | high7.5 | Exploit | ||
An SNMP community name is the default (e.g. public), null, or missing. | ||||