Description
The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web interface can retrieve the logged MAC addresses via browser developer tools.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Murrelektronik Xelity 4TX M GE
Default version status: unaffected
2.1.0affected
Murrelektronik Xelity 4TX M GE PN
Default version status: unaffected
2.1.0affected
Murrelektronik Xelity 6TX M GE
Default version status: unaffected
2.1.0affected
Murrelektronik Xelity 6TX M GE PN
Default version status: unaffected
2.1.0affected
Murrelektronik Xelity 8TX M GE
Default version status: unaffected
2.1.0affected
Murrelektronik Xelity 8TX M GE PN
Default version status: unaffected
2.1.0affected
Murrelektronik Xelity-16TX-M-GE
Default version status: unaffected
2.1.0affected
Murrelektronik Xelity-16TX-M-GE-PN
Default version status: unaffected
2.1.0affected
Murrelektronik Xelity 10 TX IP67 M FE 4P
Default version status: unaffected
2.1.0affected
Murrelektronik Xelity 10 TX IP67 M FE PN 4P
Default version status: unaffected
2.1.0affected
Murrelektronik Xelity 8 +2 TX IP67 M GE 4P
Default version status: unaffected
2.1.0affected
Murrelektronik Xelity 8 +2 TX IP67 M GE PN 4P
Default version status: unaffected
2.1.0affected
Murrelektronik Xelity 10 TX IP67 M GE 4P
Default version status: unaffected
2.1.0affected
Murrelektronik Xelity 10 TX IP67 M GE PN 4P
Default version status: unaffected
2.1.0affected
Murrelektronik Xelity 6TX 4PW IP67 M GE PN 4P
Default version status: unaffected
2.1.0affected
Murrelektronik Xelity 10 TX IP67 M FE 5P
Default version status: unaffected
2.1.0affected
Murrelektronik Xelity 10 TX IP67 M FE PN 5P
Default version status: unaffected
2.1.0affected
Murrelektronik Xelity 8 +2 TX IP67 M GE 5P
Default version status: unaffected
2.1.0affected
Murrelektronik Xelity 8 +2 TX IP67 M GE PN 5P
Default version status: unaffected
2.1.0affected
Murrelektronik Xelity 10 TX IP67 M GE 5P
Default version status: unaffected
2.1.0affected
Murrelektronik Xelity 10 TX IP67 M GE PN 5P
Default version status: unaffected
2.1.0affected
Murrelektronik Xelity 6TX 4PW IP67 M GE PN 5P
Default version status: unaffected
2.1.0affected
Murrelektronik 6 TX M GE + 4 Power M12 IP67
Default version status: unaffected
2.1.0affected