Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Murrelektronik Clear all filters
TI-2026-68045 CVE-2026-94293 · GHSA-38w2-7jv3-258f

Missing authentication in Murrelektronik AAS Edge Client REST API

Priority MEDIUM 48

An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00397 Published 2026-10-06 No fix listed CWE-306
TI-2026-07195 CVE-2026-8173 · GHSA-f42v-6cfh-6pj5

Information Disclosure via 'Copy learned MAC Addresses' Function

Priority LOW 30

The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00345 Published 2026-08-24 No fix listed CWE-209
TI-2025-27681 CVE-2025-41718 · GHSA-xxj7-jvqm-j4qx

Murrelektronik: Unprotected Transport of Credentials

Priority LOW 32

A cleartext transmission of sensitive information vulnerability in the affected products allows an unauthorized remote attacker to gain login credentials and access the Web-UI.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00245 Published 2025-10-14 No fix listed CWE-319