Mitigation Strategies

Immediate mitigation steps include disabling the webserver on the affected devices to prevent unencrypted data transmission, deactivating any unused network ports, implementing strict network segmentation to limit unauthorized access to the devices, and advising users to avoid using personal or standard passwords for the webserver accounts to reduce the risk of credential compromise. [1]

Useful 0 Not Useful 0

Executive Summary

CVE-2025-41718 is a vulnerability in the embedded web interface of certain Murrelektronik IMPACT67 Pro devices where sensitive information, specifically user login credentials, is transmitted in cleartext over unencrypted HTTP GET requests. Because the device does not support HTTPS/TLS, an attacker on the same network segment can passively intercept these credentials and gain unauthorized access to the device's Web-UI. [1]

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to unauthorized remote attackers capturing your login credentials and accessing the device's Web-UI. This compromises the confidentiality of your data and may result in leakage of personal user information. Additionally, if passwords are reused, attackers could potentially access other services using the compromised credentials. [1]

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by monitoring network traffic for unencrypted HTTP GET requests to the affected device's webserver that contain user login credentials in cleartext. Network packet capture tools like tcpdump or Wireshark can be used to identify such traffic. For example, using tcpdump, you can run: tcpdump -i <interface> -A 'tcp port 80' and look for HTTP GET requests containing login parameters. This indicates the presence of cleartext credential transmission. [1]

Useful 0 Not Useful 0