What’s Vulnerable › Vulnerabilities

CVE-2025-41718: Murrelektronik: Unprotected Transport of Credentials

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-14 · updated 2026-10-18
• Weakness: CWE-319

Description

A cleartext transmission of sensitive information vulnerability in the affected products allows an unauthorized remote attacker to gain login credentials and access the Web-UI.

Affected products

• Murrelektronik Firmware Impact67 Pro 54620: through 1.08.01
• Murrelektronik Firmware Impact67 Pro 54630: through 1.08.01
• Murrelektronik Firmware Impact67 Pro 54631: through 1.08.05
• Murrelektronik Firmware Impact67 Pro 54632: through 1.08.01

References

• https://murrelektronik.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-091.json

Get alerted when CVE-2025-41718 or the next vulnerability affects your stack