NVD

CVE-2026-8173 Detail

Received

This CVE record has recently been published to the CVE List and has been included within the NVD dataset.

Description

The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web interface can retrieve the logged MAC addresses via browser developer tools.

Metrics

NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.

CVSS 4.0 Severity and Vector Strings:

NIST: NVD

N/A

NVD assessment not yet provided.

Nist CVSS score does not match with CNA score

CNA: CERT VDE

CVSS-B 5.3 MEDIUM

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.x Severity and Vector Strings:

CNA: CERT VDE

Base Score: 5.3 MEDIUM

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS 2.0 Severity and Vector Strings:

National Institute of Standards and Technology

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL	Source(s)	Tag(s)
https://www.certvde.com/en/advisories/VDE-2026-061/	CERT VDE

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-209	Generation of Error Message Containing Sensitive Information	CERT VDE

Change History

1 change records found show changes

New CVE Received from CERT VDE 8/24/2026 3:16:54 AM

Action	Type	New Value
Added	Description	The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web interface can retrieve the logged MAC addresses via browser developer tools.
Added	CVSS V4.0	AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Added	CVSS V3.1	AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Added	CWE	CWE-209
Added	Reference	https://www.certvde.com/en/advisories/VDE-2026-061/
Added	Affected	Record truncated, showing 2048 of 3378 characters. View Entire Change Record [{"vendor":"Murrelektronik","product":"Xelity 4TX M GE","defaultStatus":"unaffected","versions":[{"version":"2.1.0","status":"affected"}]},{"vendor":"Murrelektronik","product":"Xelity 4TX M GE PN","defaultStatus":"unaffected","versions":[{"version":"2.1.0","status":"affected"}]},{"vendor":"Murrelektronik","product":"Xelity 6TX M GE","defaultStatus":"unaffected","versions":[{"version":"2.1.0","status":"affected"}]},{"vendor":"Murrelektronik","product":"Xelity 6TX M GE PN","defaultStatus":"unaffected","versions":[{"version":"2.1.0","status":"affected"}]},{"vendor":"Murrelektronik","product":"Xelity 8TX M GE","defaultStatus":"unaffected","versions":[{"version":"2.1.0","status":"affected"}]},{"vendor":"Murrelektronik","product":"Xelity 8TX M GE PN","defaultStatus":"unaffected","versions":[{"version":"2.1.0","status":"affected"}]},{"vendor":"Murrelektronik","product":"Xelity-16TX-M-GE","defaultStatus":"unaffected","versions":[{"version":"2.1.0","status":"affected"}]},{"vendor":"Murrelektronik","product":"Xelity-16TX-M-GE-PN","defaultStatus":"unaffected","versions":[{"version":"2.1.0","status":"affected"}]},{"vendor":"Murrelektronik","product":"Xelity 10 TX IP67 M FE 4P","defaultStatus":"unaffected","versions":[{"version":"2.1.0","status":"affected"}]},{"vendor":"Murrelektronik","product":"Xelity 10 TX IP67 M FE PN 4P","defaultStatus":"unaffected","versions":[{"version":"2.1.0","status":"affected"}]},{"vendor":"Murrelektronik","product":"Xelity 8 +2 TX IP67 M GE 4P","defaultStatus":"unaffected","versions":[{"version":"2.1.0","status":"affected"}]},{"vendor":"Murrelektronik","product":"Xelity 8 +2 TX IP67 M GE PN 4P","defaultStatus":"unaffected","versions":[{"version":"2.1.0","status":"affected"}]},{"vendor":"Murrelektronik","product":"Xelity 10 TX IP67 M GE 4P","defaultStatus":"unaffected","versions":[{"version":"2.1.0","status":"affected"}]},{"vendor":"Murrelektronik","product":"Xelity 10 TX IP67 M GE PN 4P","defaultStatus":"unaffected","versions":[{"version":"2.1.0","status":"affected"}]},{"vendor":"Murrelektronik","

Quick Info

CVE Dictionary Entry:
CVE-2026-8173
NVD Published Date:
08/24/2026
NVD Last Modified:
08/24/2026
Source:
CERT VDE

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

National Vulnerability Database