CVE-2017-6038

A Cross-Site Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. The web application does not sufficiently verify that requests were provided by the user who submitted the request...

Belden Hirschmann GECKO Information Disclosure Vulnerability

The Belden Hirschmann GECKO is the lean managed industrial Ethernet switch. An information disclosure vulnerability exists in the Belden Hirschmann GECKO switch. An attacker could exploit this vulnerability to obtain non-sensitive information...

Belden Hirschmann GECKO Server-Side Request Forgery Vulnerability

The Belden Hirschmann GECKO is the lean managed industrial Ethernet switch. A server-side request forgery vulnerability exists in the Belden Hirschmann GECKO switch. The vulnerability stems from the program failing to adequately validate requests. An attacker could exploit the vulnerability by...

CVE-2017-6040: Exposure of Sensitive Information to an Unauthorized Actor

An Information Exposure issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. Non-sensitive information can be obtained anonymously...

CVE-2017-6038: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. The web application does not sufficiently verify that requests were provided by the user who submitted the request...

CVE-2017-6036: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. The web server receives a request, but does not sufficiently verify that the request is being sent to the expected destination...

PT-2017-16850

Name of the Vulnerable Software and Affected Versions Belden Hirschmann GECKO Lite Managed switch versions prior to 2.0.00 Description A Server-Side Request Forgery issue was discovered. The web server receives a request but does not sufficiently verify that the request is being sent to the...

PT-2017-16852

Name of the Vulnerable Software and Affected Versions Belden Hirschmann GECKO Lite Managed switch versions 2.0.00 and prior Description A Cross-Site Request Forgery issue was found in the web application, where it does not sufficiently verify that requests were provided by the user who submitted...

PT-2017-16854

Name of the Vulnerable Software and Affected Versions Belden Hirschmann GECKO Lite Managed switch versions 2.0.00 and prior Description An Information Exposure issue allows non-sensitive information to be obtained anonymously. Recommendations For versions 2.0.00 and prior, at the moment, there is...

CVE-2017-5163: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. After an administrator downloads a configuration file, a copy of the configuration file, which includes hashes of user passwords, is saved to a location that is accessible without...

PT-2017-16356

Name of the Vulnerable Software and Affected Versions Belden Hirschmann GECKO Lite Managed switch versions 2.0.00 and prior Description An issue was discovered where a copy of the configuration file, including hashes of user passwords, is saved to an accessible location without authentication by...