PT-2026-79832 · Murrelektronik · Xelity
CVE-2026-8173
·
Published
2026-08-24
·
Updated
2026-08-24
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Murrelektronik Xelity switches (affected versions not specified)
Description
The web GUI logs MAC addresses from the device MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web interface can retrieve these logged MAC addresses using browser developer tools.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Generation of Error Message Containing Sensitive Information
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Xelity