Inadequate Encryption Strength in Belden Hirschmann Platform Switches
CVE-2018-5461

6.5MEDIUM

Key Information:

Vendor

Belden

Status
Hirschmann Automation And Control Gmbh Classic Platform Switches
Vendor
CVE Published:
6 March 2018

What is CVE-2018-5461?

An inadequate encryption strength flaw found in various Belden Hirschmann Platform Switches exposes devices to potential man-in-the-middle attacks. This vulnerability arises from the web interface's weak encryption protocols, which could enable unauthorized attackers to intercept and gather sensitive information during communications. Users are advised to review their security measures to mitigate the risks associated with this vulnerability.

Affected Version(s)

Hirschmann Automation and Control GmbH Classic Platform Switches Hirschmann Automation and Control GmbH Classic Platform Switches

References

http://www.securityfocus.com/bid/103340
vdb-entryx_refsource_BID
https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.