CVE-2026-50044

Received Received - Intake

Inadequate Encryption Strength in Pronetiqs IntraVUE

Publication date: 2026-07-23

Last updated on: 2026-07-23

Assigner: ICS-CERT

Description

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerability which could allow an attacker to steal admin credentials via weak hash or a pass-the-hash attack.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-23

Last Modified

2026-07-23

Generated

2026-07-24

AI Q&A

2026-07-24

EPSS Evaluated

N/A

NVD

CVE-2026-50044

Affected Vendors & Products

Vendor	Product	Version / Range
pronetiqs	intravue	to 3.2.1a14 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-326	The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

Attack-Flow Graph

Executive Summary

Pronetiqs IntraVUE versions 3.2.1a14 and prior have weak encryption that allows attackers to steal admin credentials through weak hash or pass-the-hash attacks. This means authentication credentials can be compromised even without direct access to the system.

Detection Guidance

Detecting this vulnerability requires checking for weak encryption or hash storage in Pronetiqs IntraVUE versions 3.2.1a14 or earlier. Inspect system logs for unusual authentication attempts or pass-the-hash activity. Review stored credentials for weak hash algorithms. Use network monitoring tools to detect unencrypted credential transmissions.

Impact Analysis

An attacker could gain admin-level access to the IntraVUE system, potentially allowing them to control industrial processes, modify configurations, or disrupt operations. This could lead to data breaches or operational failures.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. Organizations may face compliance violations, legal penalties, and reputational damage if admin credentials are compromised.

Mitigation Strategies

Update Pronetiqs IntraVUE to a version beyond 3.2.1a14 to address inadequate encryption strength. Review and strengthen credential storage mechanisms to prevent weak hash or pass-the-hash attacks.

Hi! I’m here to help you understand CVE-2026-50044. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70