CVE-2025-41718 Murrelektronik: Unprotected Transport of Credentials
An attacker can intercept cleartext credentials to gain unauthorized access to the Web-UI of Murrelektronik industrial devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-41718?
CVE-2025-41718 is a high-severity vulnerability in Murrelektronik Firmware Impact67 Pro 54620, published on 14 Oct 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A cleartext transmission of sensitive information vulnerability in the affected products allows an unauthorized remote attacker to gain login credentials and access the Web-UI.
Weakness: CWE-319
Which versions are affected by CVE-2025-41718?
How do I fix CVE-2025-41718?
No fix has been published for CVE-2025-41718 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-41718 being exploited?
There is no known exploitation of CVE-2025-41718 in the wild and no public exploit code.
Sources
Also known as GHSA-xxj7-jvqm-j4qx.