CVE-2026-35075: Hardcoded default Password for Service Account

Published Jun 3, 2026
·
Updated

An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.

Affected Software

19 affected components
All of the following
Mbs-solutions Universal Gateway Firmware<6_00_07
Any of the following
Mbs-solutions Double-a Profibus
Mbs-solutions Double-a X-link
Mbs-solutions Double-x Can
Mbs-solutions Double-x Dali
Mbs-solutions Double-x Knx
Mbs-solutions Double-x Lon
Mbs-solutions Double-x M-bus
Mbs-solutions Double-x Profinet
Mbs-solutions Double-x X-link
Mbs-solutions Single-a
Mbs-solutions Single-x
Mbs-solutions Triple-x Knx\+dali
Mbs-solutions Triple-x Knx\+lon
Mbs-solutions Triple-x Knx\+m-bus
Mbs-solutions Triple-x Profinet\+dali
Mbs-solutions Triple-x Profinet\+knx
Mbs-solutions Triple-x Profinet\+lon
Mbs-solutions Triple-x Profinet\+m-bus

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Configuration

    Remove the hardcoded default credential by configuring the device to use a unique, strong password for the service account or disable the service/account if it is not needed. Ensure the password is not stored in firmware or recoverable from the image.

    Service account (firmware) default_password / hardcoded credential = replace hardcoded password with a unique, strong password or disable the account if not required
  2. Compensating control

    Restrict network access to the affected service and management interfaces (apply firewall rules, ACLs, or network segmentation) so only trusted administrative hosts can reach the service until the hardcoded credential is removed or changed.

  3. Operational

    Rotate any credentials associated with the affected devices and service accounts (replace passwords, reissue keys/secrets) after removing or changing the hardcoded credential.

Event History

Jun 3, 2026
CVE Published
via MITRE·10:38 AM
Data Sourced
via MITRE·10:38 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:16 PM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

Which software should be prioritized for review?

Mbs-solutions Universal Gateway Firmware is identified as affected.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203