漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Information Disclosure via 'Copy learned MAC Addresses' Function
Vulnerability Description
The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web interface can retrieve the logged MAC addresses via browser developer tools.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
通过错误消息导致的信息暴露
Vulnerability Title
Murrelektronik Xelity 4TX M GE 信息泄露漏洞
Vulnerability Description
Murrelektronik Xelity 4TX M GE是德国Murrelektronik公司的一款工业以太网交换机。 Murrelektronik Xelity 4TX M GE 2.1.0版本存在信息泄露漏洞,该漏洞源于错误消息生成不当,可能导致未经身份验证的攻击者通过浏览器开发者工具检索已记录的MAC地址。
CVSS Information
N/A
Vulnerability Type
N/A