Information Exposure in Hirschmann Industrial Switches by Belden
CVE-2018-5467

6.5MEDIUM

Key Information:

Vendor

Belden

Status
Hirschmann Automation And Control Gmbh Classic Platform Switches
Vendor
CVE Published:
6 March 2018

What is CVE-2018-5467?

An information exposure vulnerability may allow unauthorized access to sensitive data through query strings in GET requests on the web interface of various Belden Hirschmann industrial switches. This flaw could enable an attacker to impersonate legitimate users and gain access to potentially sensitive operations and configurations.

Affected Version(s)

Hirschmann Automation and Control GmbH Classic Platform Switches Hirschmann Automation and Control GmbH Classic Platform Switches

References

http://www.securityfocus.com/bid/103340
vdb-entryx_refsource_BID
https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.