CVE-2026-8173 (GCVE-0-2026-8173)
Vulnerability from cvelistv5
Published
2026-08-24 06:47
Modified
2026-08-27 16:46
Severity ?
5.3 (Medium) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
VLAI Severity ?
EPSS score ?
CWE
- CWE-209 - Generation of Error Message Containing Sensitive Information
Summary
The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web interface can retrieve the logged MAC addresses via browser developer tools.
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-8173",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-27T16:11:35.747277Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-27T16:46:11.517Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Xelity 4TX M GE",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Xelity 4TX M GE PN",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Xelity 6TX M GE",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Xelity 6TX M GE PN",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Xelity 8TX M GE",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Xelity 8TX M GE PN",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Xelity-16TX-M-GE",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Xelity-16TX-M-GE-PN",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Xelity 10 TX IP67 M FE 4P",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Xelity 10 TX IP67 M FE PN 4P",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Xelity 8 +2 TX IP67 M GE 4P",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Xelity 8 +2 TX IP67 M GE PN 4P",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Xelity 10 TX IP67 M GE 4P",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Xelity 10 TX IP67 M GE PN 4P",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Xelity 6TX 4PW IP67 M GE PN 4P",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Xelity 10 TX IP67 M FE 5P",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Xelity 10 TX IP67 M FE PN 5P",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Xelity 8 +2 TX IP67 M GE 5P",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Xelity 8 +2 TX IP67 M GE PN 5P",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Xelity 10 TX IP67 M GE 5P",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Xelity 10 TX IP67 M GE PN 5P",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Xelity 6TX 4PW IP67 M GE PN 5P",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"defaultStatus": "unaffected",
"product": "6 TX M GE + 4 Power M12 IP67",
"vendor": "Murrelektronik",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58820:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58821:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58822:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58823:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58824:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58825:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58826:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58827:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58840:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58841:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58842:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58843:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58844:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58845:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58847:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58850:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58851:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58852:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58853:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58854:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58855:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58857:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58860:*",
"versionStartIncluding": "2.1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eThe web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the \u0027Copy learned MAC Addresses\u0027 function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web interface can retrieve the logged MAC addresses via browser developer tools.\u003c/p\u003e"
}
],
"value": "The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the \u0027Copy learned MAC Addresses\u0027 function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web interface can retrieve the logged MAC addresses via browser developer tools."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-209",
"description": "CWE-209 Generation of Error Message Containing Sensitive Information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-24T06:47:58.406Z",
"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
"shortName": "CERTVDE"
},
"references": [
{
"url": "https://www.certvde.com/en/advisories/VDE-2026-061/"
}
],
"source": {
"advisory": "VDE-2026-061",
"defect": [
"CERT@VDE#642078"
],
"discovery": "UNKNOWN"
},
"title": "Information Disclosure via \u0027Copy learned MAC Addresses\u0027 Function",
"x_generator": {
"engine": "Vulnogram 0.4.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
"assignerShortName": "CERTVDE",
"cveId": "CVE-2026-8173",
"datePublished": "2026-08-24T06:47:58.406Z",
"dateReserved": "2026-05-08T13:56:01.059Z",
"dateUpdated": "2026-08-27T16:46:11.517Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"vulnrichment": {
"containers": "{\"cna\": {\"affected\": [{\"defaultStatus\": \"unaffected\", \"product\": \"Xelity 4TX M GE\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Xelity 4TX M GE PN\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Xelity 6TX M GE\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Xelity 6TX M GE PN\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Xelity 8TX M GE\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Xelity 8TX M GE PN\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Xelity-16TX-M-GE\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Xelity-16TX-M-GE-PN\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Xelity 10 TX IP67 M FE 4P\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Xelity 10 TX IP67 M FE PN 4P\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Xelity 8 +2 TX IP67 M GE 4P\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Xelity 8 +2 TX IP67 M GE PN 4P\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Xelity 10 TX IP67 M GE 4P\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Xelity 10 TX IP67 M GE PN 4P\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Xelity 6TX 4PW IP67 M GE PN 4P\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Xelity 10 TX IP67 M FE 5P\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Xelity 10 TX IP67 M FE PN 5P\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Xelity 8 +2 TX IP67 M GE 5P\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Xelity 8 +2 TX IP67 M GE PN 5P\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Xelity 10 TX IP67 M GE 5P\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Xelity 10 TX IP67 M GE PN 5P\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"Xelity 6TX 4PW IP67 M GE PN 5P\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}, {\"defaultStatus\": \"unaffected\", \"product\": \"6 TX M GE + 4 Power M12 IP67\", \"vendor\": \"Murrelektronik\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.1.0\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58820:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58821:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58822:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58823:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58824:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58825:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58826:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58827:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58840:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58841:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58842:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58843:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58844:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58845:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58847:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58850:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58851:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58852:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58853:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58854:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58855:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58857:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}, {\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:murrelektronik:xelity_firmware:V2.1.0:*:*:*:*:*:58860:*\", \"versionStartIncluding\": \"2.1.0\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}], \"operator\": \"OR\"}], \"descriptions\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"\u003cp\u003eThe web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the \u0027Copy learned MAC Addresses\u0027 function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web interface can retrieve the logged MAC addresses via browser developer tools.\u003c/p\u003e\"}], \"value\": \"The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the \u0027Copy learned MAC Addresses\u0027 function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web interface can retrieve the logged MAC addresses via browser developer tools.\"}], \"metrics\": [{\"cvssV4_0\": {\"Automatable\": \"NOT_DEFINED\", \"Recovery\": \"NOT_DEFINED\", \"Safety\": \"NOT_DEFINED\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"attackVector\": \"NETWORK\", \"baseScore\": 5.3, \"baseSeverity\": \"MEDIUM\", \"privilegesRequired\": \"NONE\", \"providerUrgency\": \"NOT_DEFINED\", \"subAvailabilityImpact\": \"NONE\", \"subConfidentialityImpact\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"userInteraction\": \"PASSIVE\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N\", \"version\": \"4.0\", \"vulnAvailabilityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"LOW\", \"vulnIntegrityImpact\": \"NONE\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}, {\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"NONE\", \"baseScore\": 5.3, \"baseSeverity\": \"MEDIUM\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-209\", \"description\": \"CWE-209 Generation of Error Message Containing Sensitive Information\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"orgId\": \"270ccfa6-a436-4e77-922e-914ec3a9685c\", \"shortName\": \"CERTVDE\", \"dateUpdated\": \"2026-08-24T06:47:58.406Z\"}, \"references\": [{\"url\": \"https://www.certvde.com/en/advisories/VDE-2026-061/\"}], \"source\": {\"advisory\": \"VDE-2026-061\", \"defect\": [\"CERT@VDE#642078\"], \"discovery\": \"UNKNOWN\"}, \"title\": \"Information Disclosure via \u0027Copy learned MAC Addresses\u0027 Function\", \"x_generator\": {\"engine\": \"Vulnogram 0.4.0\"}}, \"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-8173\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-08-27T16:11:35.747277Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-08-27T16:11:43.415Z\"}}]}",
"cveMetadata": "{\"cveId\": \"CVE-2026-8173\", \"assignerOrgId\": \"270ccfa6-a436-4e77-922e-914ec3a9685c\", \"state\": \"PUBLISHED\", \"assignerShortName\": \"CERTVDE\", \"dateReserved\": \"2026-05-08T13:56:01.059Z\", \"datePublished\": \"2026-08-24T06:47:58.406Z\", \"dateUpdated\": \"2026-08-27T16:46:11.517Z\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…