CVE-2026-35075

CRITICAL

MBS Single-A - Hardcoded Default Password for Service Account

Title source: rule

Description

An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.

References (1)

Core 1

Core References

https://www.certvde.com/en/advisories/VDE-2026-039/

Scores

CVSS v3 9.8

EPSS 0.0043

EPSS Percentile 33.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-1393

Status published

Products (19)

MBS/Double-A Profibus V1_0_0_0 - V6_0_0_7

MBS/Double-A x-link V1_0_0_0 - V6_0_0_7

MBS/Double-X CAN V1_0_0_0 - V6_0_0_7

MBS/Double-X DALI V1_0_0_0 - V6_0_0_7

MBS/Double-X KNX V1_0_0_0 - V6_0_0_7

MBS/Double-X LON V1_0_0_0 - V6_0_0_7

MBS/Double-X M-Bus V1_0_0_0 - V6_0_0_7

MBS/Double-X PROFINET V1_0_0_0 - V6_0_0_7

MBS/Double-X x-link V1_0_0_0 - V6_0_0_7

MBS/Single-A V1_0_0_0 - V6_0_0_7

... and 9 more

Published Jun 03, 2026

Tracked Since Jun 03, 2026