CVE-2026-8173
Medium
Description
The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web interface can retrieve the logged MAC addresses via browser developer tools.
SeverityMedium
CVSS5.3
Exploit probability—
ProductXelity 4TX M GE
PublishedAug 24, 2026
First seenAug 24, 2026
Weakness typeCWE-209CWE-209
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Murrelektronik Xelity 4TX M GE | 2.1.0 | — |
| Murrelektronik Xelity 4TX M GE PN | 2.1.0 | — |
| Murrelektronik Xelity 6TX M GE | 2.1.0 | — |
| Murrelektronik Xelity 6TX M GE PN | 2.1.0 | — |
| Murrelektronik Xelity 8TX M GE | 2.1.0 | — |
| Murrelektronik Xelity 8TX M GE PN | 2.1.0 | — |
| Murrelektronik Xelity-16TX-M-GE | 2.1.0 | — |
| Murrelektronik Xelity-16TX-M-GE-PN | 2.1.0 | — |
| Murrelektronik Xelity 10 TX IP67 M FE 4P | 2.1.0 | — |
| Murrelektronik Xelity 10 TX IP67 M FE PN 4P | 2.1.0 | — |
| Murrelektronik Xelity 8 +2 TX IP67 M GE 4P | 2.1.0 | — |
| Murrelektronik Xelity 8 +2 TX IP67 M GE PN 4P | 2.1.0 | — |
| Murrelektronik Xelity 10 TX IP67 M GE 4P | 2.1.0 | — |
| Murrelektronik Xelity 10 TX IP67 M GE PN 4P | 2.1.0 | — |
| Murrelektronik Xelity 6TX 4PW IP67 M GE PN 4P | 2.1.0 | — |
| Murrelektronik Xelity 10 TX IP67 M FE 5P | 2.1.0 | — |
| Murrelektronik Xelity 10 TX IP67 M FE PN 5P | 2.1.0 | — |
| Murrelektronik Xelity 8 +2 TX IP67 M GE 5P | 2.1.0 | — |
| Murrelektronik Xelity 8 +2 TX IP67 M GE PN 5P | 2.1.0 | — |
| Murrelektronik Xelity 10 TX IP67 M GE 5P | 2.1.0 | — |
| Murrelektronik Xelity 10 TX IP67 M GE PN 5P | 2.1.0 | — |
| Murrelektronik Xelity 6TX 4PW IP67 M GE PN 5P | 2.1.0 | — |
| Murrelektronik 6 TX M GE + 4 Power M12 IP67 | 2.1.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.