CVE-2018-5467

Medium

Description

An Information Exposure Through Query Strings in GET Request issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate a legitimate user.

SeverityMedium
CVSS6.5
Exploit probability—
ProductBelden Hirschmann
PublishedMar 6, 2018
First seenMar 6, 2018
Weakness typeCWE-598CWE-598

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
belden hirschmann_rs20-0900mmm2tdauNo range specified—
belden hirschmann_rs20-0900nnm4tdauNo range specified—
belden hirschmann_rs20-0900vvm2tdauNo range specified—
belden hirschmann_rs20-1600l2l2sdauNo range specified—
belden hirschmann_rs20-1600l2m2sdauNo range specified—
belden hirschmann_rs20-1600l2s2sdauNo range specified—
belden hirschmann_rs20-1600l2t1sdauNo range specified—
belden hirschmann_rs20-1600m2m2sdauNo range specified—
belden hirschmann_rs20-1600m2t1sdauNo range specified—
belden hirschmann_rs20-1600s2m2sdauNo range specified—
belden hirschmann_rs20-1600s2s2sdauNo range specified—
belden hirschmann_rs20-1600s2t1sdauNo range specified—
belden hirschmann_rsr20No range specified—
belden hirschmann_rsr30No range specified—
belden hirschmann_rsb20-0800m2m2saabNo range specified—
belden hirschmann_rsb20-0800m2m2saabeNo range specified—
belden hirschmann_rsb20-0800m2m2taabNo range specified—
belden hirschmann_rsb20-0800m2m2taabeNo range specified—
belden hirschmann_rsb20-0800s2s2saabNo range specified—
belden hirschmann_rsb20-0800s2s2saabeNo range specified—
belden hirschmann_rsb20-0800s2s2taabNo range specified—
belden hirschmann_rsb20-0800s2s2taabeNo range specified—
belden hirschmann_rsb20-0800t1t1saabNo range specified—
belden hirschmann_rsb20-0800t1t1saabeNo range specified—
belden hirschmann_rsb20-0800t1t1taabNo range specified—
belden hirschmann_rsb20-0800t1t1taabeNo range specified—
belden hirschmann_rsb20-0900m2ttsaabNo range specified—
belden hirschmann_rsb20-0900m2ttsaabeNo range specified—
belden hirschmann_rsb20-0900m2tttaabNo range specified—
belden hirschmann_rsb20-0900m2tttaabeNo range specified—
belden hirschmann_rsb20-0900mmm2saabNo range specified—
belden hirschmann_rsb20-0900mmm2saabeNo range specified—
belden hirschmann_rsb20-0900mmm2taabNo range specified—
belden hirschmann_rsb20-0900mmm2taabeNo range specified—
belden hirschmann_rsb20-0900s2ttsaabNo range specified—
belden hirschmann_rsb20-0900s2ttsaabeNo range specified—
belden hirschmann_rsb20-0900s2tttaabNo range specified—
belden hirschmann_rsb20-0900s2tttaabeNo range specified—
belden hirschmann_rsb20-0900vvm2saabNo range specified—
belden hirschmann_rsb20-0900vvm2saabeNo range specified—
belden hirschmann_rsb20-0900vvm2taabNo range specified—
belden hirschmann_rsb20-0900vvm2taabeNo range specified—
belden hirschmann_rsb20-0900zzz6saabNo range specified—
belden hirschmann_rsb20-0900zzz6saabeNo range specified—
belden hirschmann_rsb20-0900zzz6taabNo range specified—
belden hirschmann_rsb20-0900zzz6taabeNo range specified—
belden hirschmann_m1-8mm-scNo range specified—
belden hirschmann_m1-8sfpNo range specified—
belden hirschmann_m1-8sm-scNo range specified—
belden hirschmann_m1-8tp-rj45No range specified—
belden hirschmann_mach102-24tp-fNo range specified—
belden hirschmann_mach102-24tp-frNo range specified—
belden hirschmann_mach102-8tpNo range specified—
belden hirschmann_mach102-8tp-fNo range specified—
belden hirschmann_mach102-8tp-frNo range specified—
belden hirschmann_mach102-8tp-rNo range specified—
belden hirschmann_mach104-16tx-poepNo range specified—
belden hirschmann_mach104-16tx-poep-l3pNo range specified—
belden hirschmann_mach104-16tx-poep_\+2xNo range specified—
belden hirschmann_mach104-16tx-poep_\+2x-l3pNo range specified—
belden hirschmann_mach104-16tx-poep_\+2x_-eNo range specified—
belden hirschmann_mach104-16tx-poep_\+2x_-e-l3pNo range specified—
belden hirschmann_mach104-16tx-poep_\+2x_-rNo range specified—
belden hirschmann_mach104-16tx-poep_\+2x_-r-l3pNo range specified—
belden hirschmann_mach104-16tx-poep_-eNo range specified—
belden hirschmann_mach104-16tx-poep_-e-l3pNo range specified—
belden hirschmann_mach104-16tx-poep_-rNo range specified—
belden hirschmann_mach104-16tx-poep_-r-l3pNo range specified—
belden hirschmann_mach104-20tx-fNo range specified—
belden hirschmann_mach104-20tx-f-4poeNo range specified—
belden hirschmann_mach104-20tx-f-l3pNo range specified—
belden hirschmann_mach104-20tx-frNo range specified—
belden hirschmann_mach104-20tx-fr-l3pNo range specified—
belden hirschmann_mach4002-24g\+3x-l2pNo range specified—
belden hirschmann_mach4002-24g\+3x-l3eNo range specified—
belden hirschmann_mach4002-24g\+3x-l3pNo range specified—
belden hirschmann_mach4002-24g-l2pNo range specified—
belden hirschmann_mach4002-24g-l3eNo range specified—
belden hirschmann_mach4002-24g-l3pNo range specified—
belden hirschmann_mach4002-48g\+3x-l2pNo range specified—
belden hirschmann_mach4002-48g\+3x-l3eNo range specified—
belden hirschmann_mach4002-48g\+3x-l3pNo range specified—
belden hirschmann_mach4002-48g-l2pNo range specified—
belden hirschmann_mach4002-48g-l3eNo range specified—
belden hirschmann_mach4002-48g-l3pNo range specified—
belden hirschmann_ms20-0800eccpNo range specified—
belden hirschmann_ms20-0800saaeNo range specified—
belden hirschmann_ms20-0800saapNo range specified—
belden hirschmann_ms20-1600eccpNo range specified—
belden hirschmann_ms20-1600saaeNo range specified—
belden hirschmann_ms20-1600saapNo range specified—
belden hirschmann_ms30-0802saaeNo range specified—
belden hirschmann_ms30-0802saapNo range specified—
belden hirschmann_ms30-1602saaeNo range specified—
belden hirschmann_octopus_16mNo range specified—
belden hirschmann_octopus_16m-8poeNo range specified—
belden hirschmann_octopus_16m-trainNo range specified—
belden hirschmann_octopus_16m-train-bpNo range specified—
belden hirschmann_octopus_24mNo range specified—
belden hirschmann_octopus_24m-8_poeNo range specified—
belden hirschmann_octopus_24m-trainNo range specified—
belden hirschmann_octopus_24m-train-bpNo range specified—
belden hirschmann_octopus_5tx_eecNo range specified—
belden hirschmann_octopus_8mNo range specified—
belden hirschmann_octopus_8m-6poeNo range specified—
belden hirschmann_octopus_8m-8poeNo range specified—
belden hirschmann_octopus_8m-trainNo range specified—
belden hirschmann_octopus_8m-train-bpNo range specified—
belden hirschmann_octopus_8tx-eecNo range specified—
belden hirschmann_octopus_8tx_poe-eecNo range specified—
belden hirschmann_octopus_os20-000900t5t5tafbhhNo range specified—
belden hirschmann_octopus_os20-000900t5t5tnebhhNo range specified—
belden hirschmann_octopus_os20-0010001m1mtrephhNo range specified—
belden hirschmann_octopus_os20-0010001s1strephhNo range specified—
belden hirschmann_octopus_os20-0010004m4mtrephhNo range specified—
belden hirschmann_octopus_os20-0010004s4strephhNo range specified—
belden hirschmann_octopus_os20-001000t5t5tafuhbNo range specified—
belden hirschmann_octopus_os20-001000t5t5tneuhbNo range specified—
belden hirschmann_octopus_os24-080900t5t5tffbhhNo range specified—
belden hirschmann_octopus_os24-080900t5t5tnebhhNo range specified—
belden hirschmann_octopus_os24-081000t5t5tffuhbNo range specified—
belden hirschmann_octopus_os24-081000t5t5tneuhbNo range specified—
belden hirschmann_octopus_os30No range specified—
belden hirschmann_octopus_os30-0008021a1atrephhNo range specified—
belden hirschmann_octopus_os30-0008021b1btrephhNo range specified—
belden hirschmann_octopus_os30-0008024a4atrephhNo range specified—
belden hirschmann_octopus_os30-0008024b4btrephhNo range specified—
belden hirschmann_octopus_os32-080802o6o6tpephhNo range specified—
belden hirschmann_octopus_os32-080802t6t6tpephhNo range specified—
belden hirschmann_octopus_os32-081602o6o6tpephhNo range specified—
belden hirschmann_octopus_os32-081602t6t6tpephhNo range specified—
belden hirschmann_octopus_os34No range specified—
belden hirschmann_octopus_os3x-xx16xxxNo range specified—
belden hirschmann_octopus_os3x-xx24xxxNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2018-5467 · Belden Hirschmann · Dark Radar