Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-35075

Hardcoded default Password for Service Account

Description

An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MBS Single-A

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Double-A Profibus

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Double-A x-link

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Single-X

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Double-X CAN

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Double-X DALI

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Double-X KNX

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Double-X LON

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Double-X M-Bus

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Double-X PROFINET

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Double-X x-link

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Triple-X KNX+DALI

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Triple-X KNX+LON

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Triple-X KNX+M-Bus

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Triple-X PROFINET+DALI

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Triple-X PROFINET+KNX

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Triple-X PROFINET+LON

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Triple-X PROFINET+M-Bus

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

References