Security Advisories

Successful exploitation allows a network-based attacker to bypass fundamental browser security boundaries without requiring any user interaction or elevated privileges.

This vulnerability allows an attacker with physical access to the device to fully extract the firmware and internal memory contents.

The vulnerability affects the stability and reliability of the vehicle's infotainment system by allowing unauthenticated Bluetooth Classic traffic to interact with low-level protocol handling.

Successful exploitation allows an attacker within Bluetooth range to inject unauthorized keystrokes into the infotainment system.

Prevents legitimate Wi-Fi access and disrupts data relay between serial and Ethernet interfaces.

Intercepted credentials enable remote administrative access.

Unauthenticated attackers can fully control the device, alter network settings, and upload firmware.

Exposes valid administrator credentials, enabling device compromise.

Murrelektronik: Unprotected Transport of Credentials The embedded web interface of the MURRELEKTRONIK IMPACT67 Pro PN DIO8 IOL8 transmits login credentials over unencrypted HTTP using a GET request.