CVE-2018-5467

🗓️ 06 Mar 2018 21:00:00Reported by icscertType

cve

cve🔗 web.nvd.nist.gov👁 68 Views

An Information Exposure Through Query Strings in GET Request issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate a legitimate user

Reporter	Title	Published	Views	Family All 7
CNVD	User Forgery Vulnerability in Multiple Belden Hirschmann Switch Products	8 Mar 201800:00	–	cnvd
Cvelist	CVE-2018-5467	6 Mar 201821:00	–	cvelist
EUVD	EUVD-2018-17237	7 Oct 202500:30	–	euvd
ICS	Hirschmann Automation and Control GmbH Classic Platform Switches	6 Mar 201800:00	–	ics
NVD	CVE-2018-5467	6 Mar 201821:29	–	nvd
Prion	Cross site request forgery (csrf)	6 Mar 201821:29	–	prion
Positive Technologies	PT-2017-08: Information Exposure in Hirschmann Automation and Control GmbH Classic Platform Switches	16 Mar 201700:00	–	ptsecurity

NVD

Vulners

Node

belden hirschmann_rs20-0900mmm2tdauMatch-

OR

belden hirschmann_rs20-0900nnm4tdauMatch-

OR

belden hirschmann_rs20-0900vvm2tdauMatch-

OR

belden hirschmann_rs20-1600l2l2sdauMatch-

OR

belden hirschmann_rs20-1600l2m2sdauMatch-

OR

belden hirschmann_rs20-1600l2s2sdauMatch-

OR

belden hirschmann_rs20-1600l2t1sdauMatch-

OR

belden hirschmann_rs20-1600m2m2sdauMatch-

OR

belden hirschmann_rs20-1600m2t1sdauMatch-

OR

belden hirschmann_rs20-1600s2m2sdauMatch-

OR

belden hirschmann_rs20-1600s2s2sdauMatch-

OR

belden hirschmann_rs20-1600s2t1sdauMatch-

Node

belden hirschmann_rsr20Match-

OR

belden hirschmann_rsr30Match-

Node

belden hirschmann_rsb20-0800m2m2saabMatch-

OR

belden hirschmann_rsb20-0800m2m2saabeMatch-

OR

belden hirschmann_rsb20-0800m2m2taabMatch-

OR

belden hirschmann_rsb20-0800m2m2taabeMatch-

OR

belden hirschmann_rsb20-0800s2s2saabMatch-

OR

belden hirschmann_rsb20-0800s2s2saabeMatch-

OR

belden hirschmann_rsb20-0800s2s2taabMatch-

OR

belden hirschmann_rsb20-0800s2s2taabeMatch-

OR

belden hirschmann_rsb20-0800t1t1saabMatch-

OR

belden hirschmann_rsb20-0800t1t1saabeMatch-

OR

belden hirschmann_rsb20-0800t1t1taabMatch-

OR

belden hirschmann_rsb20-0800t1t1taabeMatch-

OR

belden hirschmann_rsb20-0900m2ttsaabMatch-

OR

belden hirschmann_rsb20-0900m2ttsaabeMatch-

OR

belden hirschmann_rsb20-0900m2tttaabMatch-

OR

belden hirschmann_rsb20-0900m2tttaabeMatch-

OR

belden hirschmann_rsb20-0900mmm2saabMatch-

OR

belden hirschmann_rsb20-0900mmm2saabeMatch-

OR

belden hirschmann_rsb20-0900mmm2taabMatch-

OR

belden hirschmann_rsb20-0900mmm2taabeMatch-

OR

belden hirschmann_rsb20-0900s2ttsaabMatch-

OR

belden hirschmann_rsb20-0900s2ttsaabeMatch-

OR

belden hirschmann_rsb20-0900s2tttaabMatch-

OR

belden hirschmann_rsb20-0900s2tttaabeMatch-

OR

belden hirschmann_rsb20-0900vvm2saabMatch-

OR

belden hirschmann_rsb20-0900vvm2saabeMatch-

OR

belden hirschmann_rsb20-0900vvm2taabMatch-

OR

belden hirschmann_rsb20-0900vvm2taabeMatch-

OR

belden hirschmann_rsb20-0900zzz6saabMatch-

OR

belden hirschmann_rsb20-0900zzz6saabeMatch-

OR

belden hirschmann_rsb20-0900zzz6taabMatch-

OR

belden hirschmann_rsb20-0900zzz6taabeMatch-

Node

belden hirschmann_m1-8mm-scMatch-

OR

belden hirschmann_m1-8sfpMatch-

OR

belden hirschmann_m1-8sm-scMatch-

OR

belden hirschmann_m1-8tp-rj45Match-

OR

belden hirschmann_mach102-24tp-fMatch-

OR

belden hirschmann_mach102-24tp-frMatch-

OR

belden hirschmann_mach102-8tpMatch-

OR

belden hirschmann_mach102-8tp-fMatch-

OR

belden hirschmann_mach102-8tp-frMatch-

OR

belden hirschmann_mach102-8tp-rMatch-

OR

belden hirschmann_mach104-16tx-poepMatch-

OR

belden hirschmann_mach104-16tx-poep-l3pMatch-

OR

belden hirschmann_mach104-16tx-poep_+2xMatch-

OR

belden hirschmann_mach104-16tx-poep_+2x-l3pMatch-

OR

belden hirschmann_mach104-16tx-poep_+2x_-eMatch-

OR

belden hirschmann_mach104-16tx-poep_+2x_-e-l3pMatch-

OR

belden hirschmann_mach104-16tx-poep_+2x_-rMatch-

OR

belden hirschmann_mach104-16tx-poep_+2x_-r-l3pMatch-

OR

belden hirschmann_mach104-16tx-poep_-eMatch-

OR

belden hirschmann_mach104-16tx-poep_-e-l3pMatch-

OR

belden hirschmann_mach104-16tx-poep_-rMatch-

OR

belden hirschmann_mach104-16tx-poep_-r-l3pMatch-

OR

belden hirschmann_mach104-20tx-fMatch-

OR

belden hirschmann_mach104-20tx-f-4poeMatch-

OR

belden hirschmann_mach104-20tx-f-l3pMatch-

OR

belden hirschmann_mach104-20tx-frMatch-

OR

belden hirschmann_mach104-20tx-fr-l3pMatch-

Node

belden hirschmann_mach4002-24g+3x-l2pMatch-

OR

belden hirschmann_mach4002-24g+3x-l3eMatch-

OR

belden hirschmann_mach4002-24g+3x-l3pMatch-

OR

belden hirschmann_mach4002-24g-l2pMatch-

OR

belden hirschmann_mach4002-24g-l3eMatch-

OR

belden hirschmann_mach4002-24g-l3pMatch-

OR

belden hirschmann_mach4002-48g+3x-l2pMatch-

OR

belden hirschmann_mach4002-48g+3x-l3eMatch-

OR

belden hirschmann_mach4002-48g+3x-l3pMatch-

OR

belden hirschmann_mach4002-48g-l2pMatch-

OR

belden hirschmann_mach4002-48g-l3eMatch-

OR

belden hirschmann_mach4002-48g-l3pMatch-

Node

belden hirschmann_ms20-0800eccpMatch-

OR

belden hirschmann_ms20-0800saaeMatch-

OR

belden hirschmann_ms20-0800saapMatch-

OR

belden hirschmann_ms20-1600eccpMatch-

OR

belden hirschmann_ms20-1600saaeMatch-

OR

belden hirschmann_ms20-1600saapMatch-

OR

belden hirschmann_ms30-0802saaeMatch-

OR

belden hirschmann_ms30-0802saapMatch-

OR

belden hirschmann_ms30-1602saaeMatch-

Node

belden hirschmann_octopus_16mMatch-

OR

belden hirschmann_octopus_16m-8poeMatch-

OR

belden hirschmann_octopus_16m-trainMatch-

OR

belden hirschmann_octopus_16m-train-bpMatch-

OR

belden hirschmann_octopus_24mMatch-

OR

belden hirschmann_octopus_24m-8_poeMatch-

OR

belden hirschmann_octopus_24m-trainMatch-

OR

belden hirschmann_octopus_24m-train-bpMatch-

OR

belden hirschmann_octopus_5tx_eecMatch-

OR

belden hirschmann_octopus_8mMatch-

OR

belden hirschmann_octopus_8m-6poeMatch-

OR

belden hirschmann_octopus_8m-8poeMatch-

OR

belden hirschmann_octopus_8m-trainMatch-

OR

belden hirschmann_octopus_8m-train-bpMatch-

OR

belden hirschmann_octopus_8tx-eecMatch-

OR

belden hirschmann_octopus_8tx_poe-eecMatch-

OR

belden hirschmann_octopus_os20-000900t5t5tafbhhMatch-

OR

belden hirschmann_octopus_os20-000900t5t5tnebhhMatch-

OR

belden hirschmann_octopus_os20-0010001m1mtrephhMatch-

OR

belden hirschmann_octopus_os20-0010001s1strephhMatch-

OR

belden hirschmann_octopus_os20-0010004m4mtrephhMatch-

OR

belden hirschmann_octopus_os20-0010004s4strephhMatch-

OR

belden hirschmann_octopus_os20-001000t5t5tafuhbMatch-

OR

belden hirschmann_octopus_os20-001000t5t5tneuhbMatch-

OR

belden hirschmann_octopus_os24-080900t5t5tffbhhMatch-

OR

belden hirschmann_octopus_os24-080900t5t5tnebhhMatch-

OR

belden hirschmann_octopus_os24-081000t5t5tffuhbMatch-

OR

belden hirschmann_octopus_os24-081000t5t5tneuhbMatch-

OR

belden hirschmann_octopus_os30Match-

OR

belden hirschmann_octopus_os30-0008021a1atrephhMatch-

OR

belden hirschmann_octopus_os30-0008021b1btrephhMatch-

OR

belden hirschmann_octopus_os30-0008024a4atrephhMatch-

OR

belden hirschmann_octopus_os30-0008024b4btrephhMatch-

OR

belden hirschmann_octopus_os32-080802o6o6tpephhMatch-

OR

belden hirschmann_octopus_os32-080802t6t6tpephhMatch-

OR

belden hirschmann_octopus_os32-081602o6o6tpephhMatch-

OR

belden hirschmann_octopus_os32-081602t6t6tpephhMatch-

OR

belden hirschmann_octopus_os34Match-

OR

belden hirschmann_octopus_os3x-xx16xxxMatch-

OR

belden hirschmann_octopus_os3x-xx24xxxMatch-

[
  {
    "product": "Hirschmann Automation and Control GmbH Classic Platform Switches",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Hirschmann Automation and Control GmbH Classic Platform Switches"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/103340
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-065-01

21 Nov 2024 04:08Current

6.2Medium risk

Vulners AI Score6.2

CVSS 26.4

CVSS 36.5

EPSS0.00041

CWE-200 CWE-598

cve-2018-5467 information exposure query strings get request belden hirschmann switches vulnerability web interface attack