← CVE Intelligence

CVE-2026-35075

Hardcoded default Password for Service Account PUBLISHED

Description (CNA)

An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.

Affected (CNA)

Vendor / product	Versions
MBS / Single-A	affected V1_00_00 before V6_00_07
MBS / Double-A Profibus	affected V1_00_00 before V6_00_07
MBS / Double-A x-link	affected V1_00_00 before V6_00_07
MBS / Single-X	affected V1_00_00 before V6_00_07
MBS / Double-X CAN	affected V1_00_00 before V6_00_07
MBS / Double-X DALI	affected V1_00_00 before V6_00_07
MBS / Double-X KNX	affected V1_00_00 before V6_00_07
MBS / Double-X LON	affected V1_00_00 before V6_00_07
MBS / Double-X M-Bus	affected V1_00_00 before V6_00_07
MBS / Double-X PROFINET	affected V1_00_00 before V6_00_07
MBS / Double-X x-link	affected V1_00_00 before V6_00_07
MBS / Triple-X KNX+DALI	affected V1_00_00 before V6_00_07
MBS / Triple-X KNX+LON	affected V1_00_00 before V6_00_07
MBS / Triple-X KNX+M-Bus	affected V1_00_00 before V6_00_07
MBS / Triple-X PROFINET+DALI	affected V1_00_00 before V6_00_07
MBS / Triple-X PROFINET+KNX	affected V1_00_00 before V6_00_07
MBS / Triple-X PROFINET+LON	affected V1_00_00 before V6_00_07
MBS / Triple-X PROFINET+M-Bus	affected V1_00_00 before V6_00_07

CWE

CWE-1393

References

https://www.certvde.com/en/advisories/VDE-2026-039/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.