EUVD-2026-48449
GHSA-f6pj-m25g-9pq4
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Remote, unauthenticated, low-complexity filesystem disclosure crossing into the host/share (scope change S:C) with confidentiality-only impact, hence C:H and I/A:N.
Primary rating from Vendor (icscert).
CVSS VectorVendor: icscert
Lifecycle Timeline
6DescriptionCVE.org
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem.
AnalysisAI
Sensitive information disclosure in Pronetiqs IntraVUE (marketed as Panduit IntraVUE) versions 3.2.1a14 and prior allows remote unauthenticated attackers to read the underlying host and network share filesystem through the industrial-network visualization application. Rated CVSS 4.0 9.2 (Critical) by ICS-CERT, the flaw exposes files outside the application's intended access boundary. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the network-facing, no-authentication profile makes it a high-priority patch for OT environments.
Technical ContextAI
IntraVUE is a web-based network topology discovery and monitoring product used on industrial/OT networks to map and visualize connected devices. The root cause is classified as CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere), meaning the application serves or reveals host- and share-level filesystem data to a sphere (the network-facing web interface) that should not have that access. The affected component is identified by CPE cpe:2.3:a:pronetiqs:panduit_intravue, confirming this is the Pronetiqs-developed application distributed under the Panduit brand. The CVSS 4.0 vector's subsequent-system confidentiality impact (SC:H) indicates the disclosure reaches beyond the application itself into the underlying host/shared filesystem.
RemediationAI
Consult the CISA ICS advisory at https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-04 and upgrade to the vendor's fixed release above 3.2.1a14; an exact patched version number is not present in the provided input, so treat 'apply the vendor-supplied update referenced in ICSA-26-204-04' as the primary action rather than an invented version. Because the exposure is reachable over the network without authentication, if a patch cannot be applied immediately, restrict network access to the IntraVUE web/management interface using firewall rules or an OT segmentation/DMZ so only trusted management hosts can reach it, and place the server behind a VPN - the trade-off is that legitimate remote operators lose direct access and must connect through the controlled path. Additionally, run the IntraVUE service under a least-privilege account with minimal filesystem and share permissions to reduce what an attacker can read, accepting that overly tight permissions may break IntraVUE's own discovery features and require testing.
More in Panduit Intravue
View allNetwork-segmentation bypass in Pronetiqs (Panduit) IntraVUE 3.2.1a14 and earlier lets a remote, unauthenticated attacker
Cleartext credential exposure in Pronetiqs IntraVUE (Panduit IntraVUE) versions 3.2.1a14 and prior allows an attacker to
Credential theft in Pronetiqs/Panduit IntraVUE (versions 3.2.1a14 and prior) stems from the use of a cryptographically w
Unauthenticated network asset discovery exposure in Pronetiqs IntraVUE (formerly Panduit IntraVUE) versions 3.2.1a14 and
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today