Hirschmann Automation and Control GmbH Classic Platform Switches

🗓️ 06 Mar 2018 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 71 Views

Hirschmann Classic Platform Switches vulnerabilities: session fixation, information exposure, inadequate encryption

Reporter	Title	Published	Views	Family All 40
BDU FSTEC	The vulnerability of the web interface of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS allows a perpetrator to carry out a brute-force attack.	12 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web interface of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS allows a perpetrator to carry out a “man-in-the-middle” attack.	12 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web interface of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS allows a perpetrator to execute a type of attack known as “man-in-the-middle” attack.	12 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web interface of Belden Hirschmann’s network switches of the RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS series allows a hacker to disclose protected information.	12 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web interface of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS allows a intruder to gain unauthorized access and intercept web sessions.	12 Mar 202000:00	–	bdu_fstec
CNVD	Multiple Belden Hirschmann Switch Products Brute Force Vulnerabilities	8 Mar 201800:00	–	cnvd
CNVD	Man-in-the-middle Attack Vulnerability in Multiple Belden Hirschmann Switch Products	8 Mar 201800:00	–	cnvd
CNVD	Man-in-the-middle attack vulnerability in multiple Belden Hirschmann switch products (CNVD-2018-04783)	8 Mar 201800:00	–	cnvd
CNVD	Session Hijacking Vulnerability in Multiple Belden Hirschmann Switch Products	8 Mar 201800:00	–	cnvd
CNVD	User Forgery Vulnerability in Multiple Belden Hirschmann Switch Products	8 Mar 201800:00	–	cnvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2018/icsa-18-065-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-18-065-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/

06 Mar 2018 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 27.5

CVSS 39.8

EPSS0.00194

hirschmann automation and control gmbh classic platform switches session fixation information exposure inadequate encryption remote management web sessions vulnerabilities mitigation remote access defensive measures vpns social engineering.