VULNERABILITY INTELLIGENCE
CVE-2026-8173
CVSS score5.3 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2026-08-24
Last modified2026-10-14
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Description
The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web interface can retrieve the logged MAC addresses via browser developer tools.
Weakness classification
- CWE-209: Generation of Error Message Containing Sensitive Information