CVE Catalog

CVE-2026-42933

CriticalCVSS 10.0
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.29%

21th percentile - higher than 21% of all known CVEs

Summary

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, bypassing OT segmentation.

Risk Assessment

The organization is at risk of OT network segmentation bypass, potentially allowing an attacker to access critical control systems and disrupt industrial processes.

Recommendation

Update Pronetiqs IntraVUE to a version later than 3.2.1a14 that contains a fix.

Original NVD description (English source)

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, which would bypass OT segmentation.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS