VulnHub

Real-time Cybersecurity News

Critical

Panduit IntraVUE

All CISA Advisories
PhishingCVEVulnerabilityUpdateCritical

Overview

Recent vulnerabilities have been discovered in Panduit's IntraVUE software, affecting versions 3.2.1a14 and earlier. These security flaws could allow attackers to manipulate industrial control devices remotely without needing physical access or specialized tools. Notably, one vulnerability involves the storage of passwords in plaintext, which could expose sensitive credentials via the API. Users are urged to upgrade to version 3.2.1a16 or later to mitigate these risks. With potential impacts on critical infrastructure sectors including manufacturing, energy, and water systems, the urgency for organizations to update their software is high to prevent exploitation.

Key Takeaways

  • Affected Systems: Panduit IntraVUE versions 3.2.1a14 and earlier; Vendor: Pronetiqs; Critical Manufacturing, Energy, Information Technology, Water and Wastewater sectors.
  • Action Required: Users should update to the latest version of IntraVUE software, version 3.
  • Timeline: Newly disclosed

Original Article Summary

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker with access to the IT network to manipulate industrial control devices without requiring physical access, specialized insider knowledge, or advanced tooling. The following versions of Panduit IntraVUE are affected: IntraVUE <=3.2.1a14 CVSS Vendor Equipment Vulnerabilities v3 10 Pronetiqs Panduit IntraVUE Plaintext Storage of a Password, Unintended Proxy or Intermediary ('Confused Deputy'), Exposure of Sensitive System Information to an Unauthorized Control Sphere, Inadequate Encryption Strength Background Critical Infrastructure Sectors: Critical Manufacturing, Energy, Information Technology, Water and Wastewater Countries/Areas Deployed: Worldwide Company Headquarters Location: Netherlands Vulnerabilities Expand All + CVE-2026-40430 Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cleartext credentials through the API. View CVE Details Affected Products Panduit IntraVUE Vendor: Pronetiqs Product Version: Pronetiqs IntraVUE: <=3.2.1a14 Product Status: known_affected Remediations Vendor fix Pronetiqs advises users to update to the latest version of the IntraVUE software, version 3.2.1a16 or later. Mitigation For further questions, please contact Pronetiqs at info@pronetiqs.com. mailto:info@pronetiqs.com Relevant CWE: CWE-256 Plaintext Storage of a Password Metrics CVSS Version Base Score Base Severity Vector String 3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 4.0 8.7 HIGH CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVE-2026-42933 Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, which would bypass OT segmentation. View CVE Details Affected Products Panduit IntraVUE Vendor: Pronetiqs Product Version: Pronetiqs IntraVUE: <=3.2.1a14 Product Status: known_affected Remediations Vendor fix Pronetiqs advises users to update to the latest version of the IntraVUE software, version 3.2.1a16 or later. Mitigation For further questions, please contact Pronetiqs at info@pronetiqs.com. mailto:info@pronetiqs.com Relevant CWE: CWE-441 Unintended Proxy or Intermediary ('Confused Deputy') Metrics CVSS Version Base Score Base Severity Vector String 3.1 10 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 4.0 10 CRITICAL CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CVE-2026-44955 Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could allow for asset discovery by unauthenticated users. View CVE Details Affected Products Panduit IntraVUE Vendor: Pronetiqs Product Version: Pronetiqs IntraVUE: <=3.2.1a14 Product Status: known_affected Remediations Vendor fix Pronetiqs advises users to update to the latest version of the IntraVUE software, version 3.2.1a16 or later. Mitigation For further questions, please contact Pronetiqs at info@pronetiqs.com. mailto:info@pronetiqs.com Relevant CWE: CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere Metrics CVSS Version Base Score Base Severity Vector String 3.1 5.3 MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 4.0 6.9 MEDIUM CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVE-2026-50044 Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerability which could allow an attacker to steal admin credentials via weak hash or a pass-the-hash attack. View CVE Details Affected Products Panduit IntraVUE Vendor: Pronetiqs Product Version: Pronetiqs IntraVUE: <=3.2.1a14 Product Status: known_affected Remediations Vendor fix Pronetiqs advises users to update to the latest version of the IntraVUE software, version 3.2.1a16 or later. Mitigation For further questions, please contact Pronetiqs at info@pronetiqs.com. mailto:info@pronetiqs.com Relevant CWE: CWE-326 Inadequate Encryption Strength Metrics CVSS Version Base Score Base Severity Vector String 3.1 6.8 MEDIUM CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N 4.0 7.6 HIGH CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N CVE-2026-28698 Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem. View CVE Details Affected Products Panduit IntraVUE Vendor: Pronetiqs Product Version: Pronetiqs IntraVUE: <=3.2.1a14 Product Status: known_affected Remediations Vendor fix Pronetiqs advises users to update to the latest version of the IntraVUE software, version 3.2.1a16 or later. Mitigation For further questions, please contact Pronetiqs at info@pronetiqs.com. mailto:info@pronetiqs.com Relevant CWE: CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere Metrics CVSS Version Base Score Base Severity Vector String 3.1 8.6 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N 4.0 9.2 CRITICAL CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N Acknowledgments Phlebas of Lumintel reported these vulnerabilities to CISA Legal Notice and Terms of Use This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy). Recommended Practices CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the Internet. Locate control system networks and remote devices behind firewalls and isolating them from business networks. When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies. CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies. Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents. CISA also recommends users take the following measures to protect themselves from social engineering attacks: Do not click web links or open attachments in unsolicited email messages. Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams. Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks. No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time. Revision History Initial Release Date: 2026-07-23 Date Revision Summary 2026-07-23 1 Initial Publication Legal Notice and Terms of Use

Impact

Panduit IntraVUE versions 3.2.1a14 and earlier; Vendor: Pronetiqs; Critical Manufacturing, Energy, Information Technology, Water and Wastewater sectors.

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Newly disclosed

Remediation

Users should update to the latest version of IntraVUE software, version 3.2.1a16 or later. For further questions, contact Pronetiqs at info@pronetiqs.com.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Phishing, CVE, Vulnerability, and 2 more.

Read Original Article

Related Coverage

FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure

Security Affairs

The FBI has seized two hacking platforms, QScan and QTRouter, which were linked to a group in China. These tools were reportedly used to conceal cyber intrusions and target critical infrastructure in the United States. This action reflects the ongoing threat posed by state-sponsored cyber actors who are increasingly sophisticated in their methods. The seizure aims to disrupt these operations and protect vital systems that could be vulnerable to attacks. The implications are significant, as it underscores the need for vigilance in safeguarding essential services and infrastructure from foreign threats.

Aug 26, 2026

AI Speeds Up Malware Development, Not Its Success Rate: Analysis

SecurityWeek

A recent analysis by Palo Alto Networks' Unit 42 examined 405 malware samples that are linked to artificial intelligence. The findings revealed that while AI can accelerate the development of malware, it does not necessarily improve its success rate. Out of the analyzed samples, only 12 managed to reach production endpoints, which indicates that most AI-generated malware struggles to effectively infiltrate systems. This study is significant as it suggests that while cybercriminals may adopt AI to create malware more quickly, the effectiveness of these tools remains limited. Companies and security teams should continue to focus on traditional defenses as the majority of AI-linked malware is not successfully deployed.

Aug 26, 2026

Boston Scientific says cyberattack disrupted operations globally

BleepingComputer

Boston Scientific, a medical technology company, recently suffered a cyberattack that disrupted its IT systems, leading to operational issues across its global operations. The attack affected various aspects of the company's services, although specific details about the systems or products impacted were not disclosed. This incident raises concerns about the security of healthcare technology, as disruptions in medical services can have serious implications for patient care. Companies in the healthcare sector need to remain vigilant against such cyber threats, ensuring their systems are secure to protect sensitive patient data and maintain operational integrity.

Aug 26, 2026

Tortoiseshell Expands Malware Toolset With New Backdoor, SSH Tunnel

Infosecurity Magazine

Research by Group-IB has identified new infrastructure associated with the Tortoiseshell malware group, which now includes a backdoor and an SSH tunneling tool. This development indicates that attackers are expanding their toolkit, potentially increasing their ability to infiltrate and control compromised systems. The introduction of these tools can allow malicious actors to maintain persistent access and exfiltrate sensitive data without detection. Organizations should be aware of this evolving threat and take proactive measures to secure their environments against such intrusions. The findings highlight the ongoing risks associated with sophisticated cyber threats, particularly for businesses that rely on networked systems.

Aug 26, 2026

WhatsApp enhances account security with passkeys and stronger verification

SCM feed for Latest

WhatsApp has made a significant update to its security features by allowing users to create multiple passkeys. This new functionality enables users to have separate secure logins for different devices and platforms, enhancing account security. With the rise of cyber threats, this move aims to protect user accounts from unauthorized access. Users will benefit from increased flexibility and security, as they can manage logins across various devices more effectively. This update is particularly important as it addresses ongoing concerns about digital privacy and security in messaging apps.

Aug 26, 2026

FBI disrupts proxy network enabling Chinese espionage operations

BleepingComputer

The FBI has taken action against a proxy network that was facilitating Chinese espionage operations. This network acted as a technical 'quartermaster', providing tools for reconnaissance and management of proxy servers used in cyber spying activities. The disruption aims to dismantle the infrastructure that allowed these operations to flourish, targeting the methods that adversaries used to conceal their actions. This incident is significant as it reflects ongoing efforts to counteract foreign cyber threats and protect sensitive information. It emphasizes the importance of vigilance against cyber espionage tactics that can undermine national security and compromise data integrity.

Aug 26, 2026