Murrelektronik vulnerabilities
Published CVEs affecting Murrelektronik products: 3 record(s), with severity, exploitation and fixes.
Xelity 10 TX IP67 M FE PN 4P 16 TX M GE + 4 Power M12 IP67 1Xelity 6TX 4PW IP67 M GE PN 5P 1Xelity 10 TX IP67 M GE PN 5P 1Xelity 10 TX IP67 M GE 5P 1Xelity 8 +2 TX IP67 M GE PN 5P 1Xelity 8 +2 TX IP67 M GE 5P 1Xelity 10 TX IP67 M FE PN 5P 1Xelity 10 TX IP67 M FE 5P 1Xelity 6TX 4PW IP67 M GE PN 4P 1Xelity 10 TX IP67 M GE PN 4P 1Xelity 10 TX IP67 M GE 4P 1Xelity 8 +2 TX IP67 M GE PN 4P 1Xelity 8 +2 TX IP67 M GE 4P 1Firmware Impact67 Pro 54630 1Xelity 10 TX IP67 M FE 4P 1Xelity-16TX-M-GE-PN 1Xelity-16TX-M-GE 1Xelity 8TX M GE PN 1Xelity 8TX M GE 1Xelity 6TX M GE PN 1Xelity 6TX M GE 1Xelity 4TX M GE PN 1Xelity 4TX M GE 1Software AAS Edge Client all versions 1Firmware Impact67 Pro 54632 1Firmware Impact67 Pro 54631 1Firmware Impact67 Pro 54620 1
CVE-2026-94293
Critical · 9.8
CWE-306 Oct 6, 2026
Missing authentication for critical function in the aas-edge-client REST API
An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints.
CVE-2026-8173
Medium · 5.3
CWE-209 Aug 24, 2026
Information Disclosure via 'Copy learned MAC Addresses' Function
The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web interface can retrieve the logged MAC addresses via browser developer tools.
CVE-2025-41718
High · 7.5
CWE-319 Oct 14, 2025
Murrelektronik: Unprotected Transport of Credentials
A cleartext transmission of sensitive information vulnerability in the affected products allows an unauthorized remote attacker to gain login credentials and access the Web-UI.