Skip to main content

IntraVUE EUVDEUVD-2026-48446

| CVE-2026-42933 CRITICAL
Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441)
2026-07-23 icscert GHSA-jp3p-8p4m-hxwj
Authentication Bypass Panduit Intravue
10.0
CVSS 4.0 · Vendor: icscert
Share

Severity by source

Vendor (icscert) PRIMARY
10.0 CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
10.0 CRITICAL

Remote, low-complexity, unauthenticated proxy abuse (AV:N/AC:L/PR:N/UI:N); segmentation bypass reaches other systems, giving scope change (S:C) with high C/I/A on exposed OT assets.

3.1 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (icscert).

CVSS VectorVendor: icscert

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Jul 23, 2026 - 22:47 vuln.today
CVE Published
Jul 23, 2026 - 21:59 cve.org
CRITICAL 10.0

DescriptionCVE.org

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, which would bypass OT segmentation.

AnalysisAI

Network-segmentation bypass in Pronetiqs (Panduit) IntraVUE 3.2.1a14 and earlier lets a remote, unauthenticated attacker abuse the product as an active proxy/intermediary to relay traffic across otherwise-isolated OT boundaries. Because IntraVUE typically sits with visibility into both IT and industrial control network segments, this confused-deputy behavior effectively neutralizes the network zoning that protects OT assets. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Reach exposed IntraVUE instance
Delivery
Coerce IntraVUE into active proxy
Exploit
Relay traffic across OT segmentation
Execution
Access isolated OT devices
Impact
Read or manipulate control traffic
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The exploit requires network reachability to an IntraVUE instance (version 3.2.1a14 or earlier) that is positioned with connectivity spanning the segmentation boundary the attacker wishes to cross - IntraVUE's normal deployment as a cross-segment network-discovery tool is itself the enabling condition. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment All available severity signals point the same direction: the CVSS 3.1 vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H yields a maximal 10.0, indicating remote, low-complexity, unauthenticated exploitation with a scope change into adjacent (OT) systems. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker who can reach an exposed IntraVUE instance from an IT-side or otherwise untrusted network sends requests that coerce IntraVUE into proxying traffic through to devices in a segmented OT zone. Using this relay, the attacker reaches PLCs, HMIs, or other assets that firewall/VLAN segmentation was intended to isolate, then reads or manipulates OT communications. …
Remediation No vendor-released patch version is identified in the available data; consult CISA advisory ICSA-26-204-04 (https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-04) for the vendor's fixed build and upgrade guidance, and apply the vendor-remediated release as the primary fix once confirmed. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: identify all instances of IntraVUE 3.2.1a14 and earlier in your environment, confirm whether each has visibility into both IT and OT network boundaries, and implement immediate network-level isolation by restricting IntraVUE's outbound relay capability (e.g., firewall rules limiting its lateral connectivity). …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Panduit Intravue

View all
CVE-2026-28698 CRITICAL
9.2 Jul 23

Sensitive information disclosure in Pronetiqs IntraVUE (marketed as Panduit IntraVUE) versions 3.2.1a14 and prior allows
CVE-2026-40430 HIGH
8.7 Jul 23

Cleartext credential exposure in Pronetiqs IntraVUE (Panduit IntraVUE) versions 3.2.1a14 and prior allows an attacker to
CVE-2026-50044 HIGH
7.6 Jul 23

Credential theft in Pronetiqs/Panduit IntraVUE (versions 3.2.1a14 and prior) stems from the use of a cryptographically w
CVE-2026-44955 MEDIUM
6.9 Jul 23

Unauthenticated network asset discovery exposure in Pronetiqs IntraVUE (formerly Panduit IntraVUE) versions 3.2.1a14 and

Same weakness CWE-441 – Unintended Proxy or Intermediary ('Confused Deputy')

View all
CVE-2019-3924 HIGH POC
7.5
CVE-2020-5412 MEDIUM POC
6.5
CVE-2019-3996 MEDIUM POC
6.5
CVE-2025-62718 MEDIUM POC
6.3
CVE-2025-64123 CRITICAL
9.8
CVE-2021-20042 CRITICAL
9.8
CVE-2026-6993 MEDIUM POC
5.5
CVE-2015-2947 CRITICAL
9.1

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

EUVD-2026-48446 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy