Xelity 8Tx M Ge
Monthly
Information disclosure in Murrelektronik Xelity industrial Ethernet switches allows unauthenticated network attackers to retrieve MAC addresses from the device when an administrator uses the 'Copy learned MAC Addresses' function. The application improperly exposes logged MAC address data via browser developer tools (CVSS 4.0: 5.3). No public exploit code has been identified, but the trivial attack path (opening developer tools) and network accessibility present a moderate risk to industrial facilities.
Information disclosure in Murrelektronik Xelity industrial Ethernet switches allows unauthenticated network attackers to retrieve MAC addresses from the device when an administrator uses the 'Copy learned MAC Addresses' function. The application improperly exposes logged MAC address data via browser developer tools (CVSS 4.0: 5.3). No public exploit code has been identified, but the trivial attack path (opening developer tools) and network accessibility present a moderate risk to industrial facilities.