Vulnerability · Published Oct 14, 2025 · Assigned by CERTVDE
CVE-2025-41718Murrelektronik: Unprotected Transport of Credentials
High 7.5
In plain English
A high-severity security flaw in Firmware Impact67 Pro 54620 from Murrelektronik. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.2%top 84.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A cleartext transmission of sensitive information vulnerability in the affected products allows an unauthorized remote attacker to gain login credentials and access the Web-UI.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Murrelektronik | Firmware Impact67 Pro 54630 | 0.0.0 – through 1.08.01 |
| Murrelektronik | Firmware Impact67 Pro 54620 | 0.0.0 – through 1.08.01 |
| Murrelektronik | Firmware Impact67 Pro 54631 | 0.0.0 – through 1.08.05 |
| Murrelektronik | Firmware Impact67 Pro 54632 | 0.0.0 – through 1.08.01 |
Weakness: CWE-319 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N