Answer in brief
CVE-2026-8173 records a Unknown severity vulnerability in Information Disclosure via 'Copy learned MAC Addresses' Function. The current sources do not mark it as known exploited. The current feed maps Murrelektronik/6 TX M GE + 4 Power M12 IP67 (generic), Murrelektronik/Xelity 10 TX IP67 M FE 4P (generic), Murrelektronik/Xelity 10 TX IP67 M FE 5P (generic), Murrelektronik/Xelity 10 TX IP67 M FE PN 4P (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Murrelektronik/6 TX M GE + 4 Power M12 IP67 (generic), Murrelektronik/Xelity 10 TX IP67 M FE 4P (generic), Murrelektronik/Xelity 10 TX IP67 M FE 5P (generic), Murrelektronik/Xelity 10 TX IP67 M FE PN 4P (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Murrelektronik/6 TX M GE + 4 Power M12 IP67generic | 2.1.0 | Not reported |
| Murrelektronik/Xelity 10 TX IP67 M FE 4Pgeneric | 2.1.0 | Not reported |
| Murrelektronik/Xelity 10 TX IP67 M FE 5Pgeneric | 2.1.0 | Not reported |
| Murrelektronik/Xelity 10 TX IP67 M FE PN 4Pgeneric | 2.1.0 | Not reported |
| Murrelektronik/Xelity 10 TX IP67 M FE PN 5Pgeneric | 2.1.0 | Not reported |
| Murrelektronik/Xelity 10 TX IP67 M GE 4Pgeneric | 2.1.0 | Not reported |
| Murrelektronik/Xelity 10 TX IP67 M GE 5Pgeneric | 2.1.0 | Not reported |
| Murrelektronik/Xelity 10 TX IP67 M GE PN 4Pgeneric | 2.1.0 | Not reported |
| Murrelektronik/Xelity 10 TX IP67 M GE PN 5Pgeneric | 2.1.0 | Not reported |
| Murrelektronik/Xelity-16TX-M-GEgeneric | 2.1.0 | Not reported |
| Murrelektronik/Xelity-16TX-M-GE-PNgeneric | 2.1.0 | Not reported |
| Murrelektronik/Xelity 4TX M GEgeneric | 2.1.0 | Not reported |
| Murrelektronik/Xelity 4TX M GE PNgeneric | 2.1.0 | Not reported |
| Murrelektronik/Xelity 6TX 4PW IP67 M GE PN 4Pgeneric | 2.1.0 | Not reported |
| Murrelektronik/Xelity 6TX 4PW IP67 M GE PN 5Pgeneric | 2.1.0 | Not reported |
| Murrelektronik/Xelity 6TX M GEgeneric | 2.1.0 | Not reported |
| Murrelektronik/Xelity 6TX M GE PNgeneric | 2.1.0 | Not reported |
| Murrelektronik/Xelity 8 +2 TX IP67 M GE 4Pgeneric | 2.1.0 | Not reported |
| Murrelektronik/Xelity 8 +2 TX IP67 M GE 5Pgeneric | 2.1.0 | Not reported |
| Murrelektronik/Xelity 8 +2 TX IP67 M GE PN 4Pgeneric | 2.1.0 | Not reported |
| Murrelektronik/Xelity 8 +2 TX IP67 M GE PN 5Pgeneric | 2.1.0 | Not reported |
| Murrelektronik/Xelity 8TX M GEgeneric | 2.1.0 | Not reported |
| Murrelektronik/Xelity 8TX M GE PNgeneric | 2.1.0 | Not reported |
Published upstream
Aug 24, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 24, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 24, 2026
The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web interface can retrieve the logged MAC addresses via browser developer tools.
Quoted source text, attributed separately from HOL analysis.