CVE-2017-5163

2017-02-1321:00:00

icscert

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.7%

JSON

An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. After an administrator downloads a configuration file, a copy of the configuration file, which includes hashes of user passwords, is saved to a location that is accessible without authentication by path traversal.

CNA Affected

[
  {
    "product": "Belden Hirschmann GECKO 2.0.00 and prior",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Belden Hirschmann GECKO 2.0.00 and prior"
      }
    ]
  }
]