CVE-2026-42933
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, bypassing OT segmentation.
Risk Assessment
The organization is at risk of OT network segmentation bypass, potentially allowing an attacker to access critical control systems and disrupt industrial processes.
Recommendation
Update Pronetiqs IntraVUE to a version later than 3.2.1a14 that contains a fix.
Other vulnerabilities in Pronetiqs IntraVUE
See all- CVE-2026-50044Medium
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerability that could allow an attacker to steal admin credentials via weak hash or pass-the-hash attack.
- CVE-2026-44955Medium
Pronetiqs IntraVUE versions 3.2.1a14 and prior expose sensitive system information to unauthenticated users, allowing asset discovery.
- CVE-2026-40430High
Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cleartext credentials through the API.
- CVE-2026-28698High
Pronetiqs IntraVUE versions 3.2.1a14 and prior expose sensitive system information to unauthorized entities, potentially revealing host/share files.
Original NVD description (English source)
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, which would bypass OT segmentation.