The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web interface can retrieve the logged MAC addresses via browser developer tools.
Project Subscriptions
| Vendors | Products |
|---|---|
|
Murrelektronik
Subscribe
|
6 Tx M Ge + 4 Power M12 Ip67
Subscribe
Xelity-16tx-m-ge
Subscribe
Xelity-16tx-m-ge-pn
Subscribe
Xelity 10 Tx Ip67 M Fe 4p
Subscribe
Xelity 10 Tx Ip67 M Fe 5p
Subscribe
Xelity 10 Tx Ip67 M Fe Pn 4p
Subscribe
Xelity 10 Tx Ip67 M Fe Pn 5p
Subscribe
Xelity 10 Tx Ip67 M Ge 4p
Subscribe
Xelity 10 Tx Ip67 M Ge 5p
Subscribe
Xelity 10 Tx Ip67 M Ge Pn 4p
Subscribe
Xelity 10 Tx Ip67 M Ge Pn 5p
Subscribe
Xelity 4tx M Ge
Subscribe
Xelity 4tx M Ge Pn
Subscribe
Xelity 6tx 4pw Ip67 M Ge Pn 4p
Subscribe
Xelity 6tx 4pw Ip67 M Ge Pn 5p
Subscribe
Xelity 6tx M Ge
Subscribe
Xelity 6tx M Ge Pn
Subscribe
Xelity 8 +2 Tx Ip67 M Ge 4p
Subscribe
Xelity 8 +2 Tx Ip67 M Ge 5p
Subscribe
Xelity 8 +2 Tx Ip67 M Ge Pn 4p
Subscribe
Xelity 8 +2 Tx Ip67 M Ge Pn 5p
Subscribe
Xelity 8tx M Ge
Subscribe
Xelity 8tx M Ge Pn
Subscribe
Xelity Firmware
Subscribe
|
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://www.certvde.com/en/advisories/VDE-2026-061/ |
|
History
Mon, 24 Aug 2026 21:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Murrelektronik 6 Tx M Ge + 4 Power M12 Ip67
Murrelektronik xelity-16tx-m-ge Murrelektronik xelity-16tx-m-ge-pn Murrelektronik xelity 10 Tx Ip67 M Fe 4p Murrelektronik xelity 10 Tx Ip67 M Fe 5p Murrelektronik xelity 10 Tx Ip67 M Fe Pn 4p Murrelektronik xelity 10 Tx Ip67 M Fe Pn 5p Murrelektronik xelity 10 Tx Ip67 M Ge 4p Murrelektronik xelity 10 Tx Ip67 M Ge 5p Murrelektronik xelity 10 Tx Ip67 M Ge Pn 4p Murrelektronik xelity 10 Tx Ip67 M Ge Pn 5p Murrelektronik xelity 4tx M Ge Murrelektronik xelity 4tx M Ge Pn Murrelektronik xelity 6tx 4pw Ip67 M Ge Pn 4p Murrelektronik xelity 6tx 4pw Ip67 M Ge Pn 5p Murrelektronik xelity 6tx M Ge Murrelektronik xelity 6tx M Ge Pn Murrelektronik xelity 8 +2 Tx Ip67 M Ge 4p Murrelektronik xelity 8 +2 Tx Ip67 M Ge 5p Murrelektronik xelity 8 +2 Tx Ip67 M Ge Pn 4p Murrelektronik xelity 8 +2 Tx Ip67 M Ge Pn 5p Murrelektronik xelity 8tx M Ge Murrelektronik xelity 8tx M Ge Pn |
|
| Vendors & Products |
Murrelektronik 6 Tx M Ge + 4 Power M12 Ip67
Murrelektronik xelity-16tx-m-ge Murrelektronik xelity-16tx-m-ge-pn Murrelektronik xelity 10 Tx Ip67 M Fe 4p Murrelektronik xelity 10 Tx Ip67 M Fe 5p Murrelektronik xelity 10 Tx Ip67 M Fe Pn 4p Murrelektronik xelity 10 Tx Ip67 M Fe Pn 5p Murrelektronik xelity 10 Tx Ip67 M Ge 4p Murrelektronik xelity 10 Tx Ip67 M Ge 5p Murrelektronik xelity 10 Tx Ip67 M Ge Pn 4p Murrelektronik xelity 10 Tx Ip67 M Ge Pn 5p Murrelektronik xelity 4tx M Ge Murrelektronik xelity 4tx M Ge Pn Murrelektronik xelity 6tx 4pw Ip67 M Ge Pn 4p Murrelektronik xelity 6tx 4pw Ip67 M Ge Pn 5p Murrelektronik xelity 6tx M Ge Murrelektronik xelity 6tx M Ge Pn Murrelektronik xelity 8 +2 Tx Ip67 M Ge 4p Murrelektronik xelity 8 +2 Tx Ip67 M Ge 5p Murrelektronik xelity 8 +2 Tx Ip67 M Ge Pn 4p Murrelektronik xelity 8 +2 Tx Ip67 M Ge Pn 5p Murrelektronik xelity 8tx M Ge Murrelektronik xelity 8tx M Ge Pn |
Mon, 24 Aug 2026 07:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web interface can retrieve the logged MAC addresses via browser developer tools. | |
| Title | Information Disclosure via 'Copy learned MAC Addresses' Function | |
| First Time appeared |
Murrelektronik
Murrelektronik xelity Firmware |
|
| Weaknesses | CWE-209 | |
| CPEs | cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58820:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58821:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58822:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58823:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58824:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58825:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58826:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58827:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58840:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58841:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58842:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58843:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58844:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58845:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58847:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58850:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58851:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58852:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58853:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58854:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58855:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58857:* cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58860:* |
|
| Vendors & Products |
Murrelektronik
Murrelektronik xelity Firmware |
|
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: CERTVDE
Published:
Updated: 2026-08-24T06:47:58.406Z
Reserved: 2026-05-08T13:56:01.059Z
Link: CVE-2026-8173
No data.
Status : Received
Published: 2026-08-24T07:16:54.570
Modified: 2026-08-24T07:16:54.570
Link: CVE-2026-8173
No data.
OpenCVE Enrichment
Updated: 2026-08-24T21:11:42Z
Weaknesses