An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Mon, 08 Jun 2026 17:30:00 +0000

Type Values Removed Values Added
First Time appeared Mbs-solutions
Mbs-solutions double-a Profibus
Mbs-solutions double-a X-link
Mbs-solutions double-x Can
Mbs-solutions double-x Dali
Mbs-solutions double-x Knx
Mbs-solutions double-x Lon
Mbs-solutions double-x M-bus
Mbs-solutions double-x Profinet
Mbs-solutions double-x X-link
Mbs-solutions single-a
Mbs-solutions single-x
Mbs-solutions triple-x Knx\+dali
Mbs-solutions triple-x Knx\+lon
Mbs-solutions triple-x Knx\+m-bus
Mbs-solutions triple-x Profinet\+dali
Mbs-solutions triple-x Profinet\+knx
Mbs-solutions triple-x Profinet\+lon
Mbs-solutions triple-x Profinet\+m-bus
Mbs-solutions universal Gateway Firmware
CPEs cpe:2.3:h:mbs-solutions:double-a_profibus:-:*:*:*:*:*:*:*
cpe:2.3:h:mbs-solutions:double-a_x-link:-:*:*:*:*:*:*:*
cpe:2.3:h:mbs-solutions:double-x_can:-:*:*:*:*:*:*:*
cpe:2.3:h:mbs-solutions:double-x_dali:-:*:*:*:*:*:*:*
cpe:2.3:h:mbs-solutions:double-x_knx:-:*:*:*:*:*:*:*
cpe:2.3:h:mbs-solutions:double-x_lon:-:*:*:*:*:*:*:*
cpe:2.3:h:mbs-solutions:double-x_m-bus:-:*:*:*:*:*:*:*
cpe:2.3:h:mbs-solutions:double-x_profinet:-:*:*:*:*:*:*:*
cpe:2.3:h:mbs-solutions:double-x_x-link:-:*:*:*:*:*:*:*
cpe:2.3:h:mbs-solutions:single-a:-:*:*:*:*:*:*:*
cpe:2.3:h:mbs-solutions:single-x:-:*:*:*:*:*:*:*
cpe:2.3:h:mbs-solutions:triple-x_knx\+dali:-:*:*:*:*:*:*:*
cpe:2.3:h:mbs-solutions:triple-x_knx\+lon:-:*:*:*:*:*:*:*
cpe:2.3:h:mbs-solutions:triple-x_knx\+m-bus:-:*:*:*:*:*:*:*
cpe:2.3:h:mbs-solutions:triple-x_profinet\+dali:-:*:*:*:*:*:*:*
cpe:2.3:h:mbs-solutions:triple-x_profinet\+knx:-:*:*:*:*:*:*:*
cpe:2.3:h:mbs-solutions:triple-x_profinet\+lon:-:*:*:*:*:*:*:*
cpe:2.3:h:mbs-solutions:triple-x_profinet\+m-bus:-:*:*:*:*:*:*:*
cpe:2.3:o:mbs-solutions:universal_gateway_firmware:*:*:*:*:*:*:*:*
Vendors & Products Mbs-solutions
Mbs-solutions double-a Profibus
Mbs-solutions double-a X-link
Mbs-solutions double-x Can
Mbs-solutions double-x Dali
Mbs-solutions double-x Knx
Mbs-solutions double-x Lon
Mbs-solutions double-x M-bus
Mbs-solutions double-x Profinet
Mbs-solutions double-x X-link
Mbs-solutions single-a
Mbs-solutions single-x
Mbs-solutions triple-x Knx\+dali
Mbs-solutions triple-x Knx\+lon
Mbs-solutions triple-x Knx\+m-bus
Mbs-solutions triple-x Profinet\+dali
Mbs-solutions triple-x Profinet\+knx
Mbs-solutions triple-x Profinet\+lon
Mbs-solutions triple-x Profinet\+m-bus
Mbs-solutions universal Gateway Firmware

Wed, 03 Jun 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 03 Jun 2026 12:30:00 +0000

Type Values Removed Values Added
Description An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.
Title Hardcoded default Password for Service Account
First Time appeared Mbs
Mbs double A Profibus Firmware
Mbs double A X Link Firmware
Mbs double X Can Firmware
Mbs double X Dali Firmware
Mbs double X Knx Firmware
Mbs double X Lon Firmware
Mbs double X M Bus Firmware
Mbs double X Profinet Firmware
Mbs double X X Link Firmware
Mbs single A Firmware
Mbs single X Firmware
Mbs triple X Knx Dali Firmware
Mbs triple X Knx Lon Firmware
Mbs triple X Knx M Bus Firmware
Mbs triple X Profinet Dali Firmware
Mbs triple X Profinet Knx Firmware
Mbs triple X Profinet Lon Firmware
Mbs triple X Profinet M Bus Firmware
Weaknesses CWE-1393
CPEs cpe:2.3:o:mbs:double_a_profibus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mbs:double_a_x_link_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mbs:double_x_can_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mbs:double_x_dali_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mbs:double_x_knx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mbs:double_x_lon_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mbs:double_x_m_bus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mbs:double_x_profinet_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mbs:double_x_x_link_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mbs:single_a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mbs:single_x_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mbs:triple_x_knx_dali_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mbs:triple_x_knx_lon_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mbs:triple_x_knx_m_bus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mbs:triple_x_profinet_dali_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mbs:triple_x_profinet_knx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mbs:triple_x_profinet_lon_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mbs:triple_x_profinet_m_bus_firmware:*:*:*:*:*:*:*:*
Vendors & Products Mbs
Mbs double A Profibus Firmware
Mbs double A X Link Firmware
Mbs double X Can Firmware
Mbs double X Dali Firmware
Mbs double X Knx Firmware
Mbs double X Lon Firmware
Mbs double X M Bus Firmware
Mbs double X Profinet Firmware
Mbs double X X Link Firmware
Mbs single A Firmware
Mbs single X Firmware
Mbs triple X Knx Dali Firmware
Mbs triple X Knx Lon Firmware
Mbs triple X Knx M Bus Firmware
Mbs triple X Profinet Dali Firmware
Mbs triple X Profinet Knx Firmware
Mbs triple X Profinet Lon Firmware
Mbs triple X Profinet M Bus Firmware
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 9.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: CERTVDE

Published:

Updated: 2026-07-03T08:49:03.078Z

Reserved: 2026-04-01T08:28:27.141Z

Link: CVE-2026-35075

cve-icon Vulnrichment

Updated: 2026-06-03T12:41:02.684Z

cve-icon NVD

Status : Analyzed

Published: 2026-06-03T13:16:19.407

Modified: 2026-07-22T19:10:00.120

Link: CVE-2026-35075

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-05T10:12:03Z

Weaknesses