VIRY.CZRADAR
sektor
téma
typ textu
zrušit filtry

Výsledky hledání

výrobce: Murrelektronik× v celém archivu zrušit filtry

4 karet z 4 položek CZ · EN/orig

Murrelektronik: Missing Authentication in aas-edge-client Reference Implementation allows Manipulation of AAS Data

[VDE-2026-108] The aas-edge-client is a reference implementation of an Asset Administration Shell (AAS) edge application, published by Murrelektronik GmbH on GitHub for the LNI 4.0 testbed demonstrator. Its REST API is bound to all network interfaces on TCP port 18000, requires no authentication and accepts cross-origin requests from any origin. The reference implementation was never intended for productive use and is no longer maintained. Affected are all aas-edge-client versions.

EPSS 0.00 CVE-2026-94293 Murrelektronik výroba a průmysl DE

tg: zranitelnost tp: průmyslové systémy

· CERT@VDE · Murrelektronik: Missing Authentication in aas-edge-client Reference Implementation allows Manipulation of AAS Data

Murrelektronik: Vulnerability in 'Copy learned MAC Addresses' function enables MAC Spoofing on Xelity Switches

[VDE-2026-061] An information disclosure vulnerability in the web GUI of Murrelektronik Xelity switches causes MAC addresses from the device's MAC address table to be written into a server-side log that is exposed via the device's web interface to unauthenticated users. The leak is triggered when an authenticated administrator invokes the 'Copy learned MAC Addresses' function, which causes a syslog error that inserts the affected MAC addresses into the log output. Once the error has been…

EPSS 0.00 CVE-2026-8173 Murrelektronik výroba a průmysl DE

tg: zranitelnost tp: průmyslové systémy

· CERT@VDE · Murrelektronik: Vulnerability in 'Copy learned MAC Addresses' function enables MAC Spoofing on Xelity Switches

Murrelektronik Devices Vulnerable to SNMP GETBULK Reflection DDoS

[VDE-2026-063] Multiple Murrelektronik network-enabled devices respond to SNMPv2c 'GETBULK' requests with disproportionately large response packets when the requesting party specifies a large max-repetitions value. This response amplification allows the affected devices to be misused as reflectors in distributed denial-of-service (DDoS) attacks against arbitrary third-party victims on the internet.

EPSS 0.05 CVE-2008-4309 Murrelektronik DE

tg: zranitelnost tp: DDoS

· CERT@VDE · Murrelektronik Devices Vulnerable to SNMP GETBULK Reflection DDoS

Several Murrelektronik Devices use Default SNMP Community Names

[VDE-2026-062] Several Murrelektronik devices using Profinet are shipped with the default SNMP community names ('public' for read access and 'private' for write access). If these community strings remain unchanged in the field, an unauthenticated attacker with network access to the device can read its configuration and, depending on the writable OIDs, modify device settings.

EPSS 0.29 CVE-1999-0517 Murrelektronik DE

tg: zranitelnost tp: průmyslové systémy

· CERT@VDE · Several Murrelektronik Devices use Default SNMP Community Names