Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.3	EPSS 0.3%	CVE-2026-94293Software AAS Edge Client all versions · Missing Authentication for Critical Function Critical9.3EPSS 0.3%2026-10-06CVE Database V5CVE-2026-94293 An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints. EPSS 0.3%Vulnerability Murrelektronik #cwe-306	CVE Database V5	2026-10-06
Medium	5.3	EPSS 0.3%	CVE-2026-8173Xelity 4TX M GE · Generation of Error Message Containing Sensitive Information Medium5.3EPSS 0.3%2026-08-24CVE Database V5CVE-2026-8173 CVE-2026-8173 is a medium severity vulnerability in the Murrelektronik Xelity 4TX M GE switch web GUI version 2.1.0. It involves improper error message generation that allows an unauthenticated attacker with network access to the web interface to retrieve MAC addresses logged by the device. This occurs when an authenticated administrator uses the 'Copy learned MAC Addresses' function, and the error messages leak sensitive MAC address information. EPSS 0.3%Vulnerability Murrelektronik #cwe-209 #ghsa-f42v-6cfh-6pj5 #murrelektronik-gmbh	CVE Database V5	2026-08-24
High	7.5	EPSS 0.3%	CVE-2025-41718Firmware Impact67 Pro 54630 · Cleartext Transmission of Sensitive Information High7.5EPSS 0.3%2025-10-14CVE Database V5CVE-2025-41718 A cleartext transmission of sensitive information vulnerability in the affected products allows an unauthorized remote attacker to gain login credentials and access the Web-UI. EPSS 0.3%Vulnerability Murrelektronik #cwe-319	CVE Database V5	2025-10-14

Showing 1–3 of 3 results