CVE-2017-5163

An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. After an administrator downloads a configuration file, a copy of the configuration file, which includes hashes of user passwords, is saved to a location that is accessible without...

CVE-2017-5163

CVE-2017-5163 affects Belden Hirschmann GECKO Lite Managed Switch (version 2.0.00 and earlier). After an administrator downloads a configuration file, a copy containing password hashes can be saved to a location accessible without authentication via path traversal, enabling information disclosure...

Belden Hirschmann Classic Platform switches L2B Information Disclosure Vulnerability

Belden Hirschmann Classic Platform switches are switch products from Belden USA. An information disclosure vulnerability exists in Belden Hirschmann Classic Platform switches L2B prior to 05.3.07 and L2E, L2P, L3E,L3P prior to 09.0.06, which allows remote attackers to obtain sensitive information...

CVE-2016-2509

The password-sync feature on Belden Hirschmann Classic Platform switches L2B before 05.3.07 and L2E, L2P, L3E, and L3P before 09.0.06 sets an SNMP community to the same string as the administrator password, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2016-2509

The password-sync feature on Belden Hirschmann Classic Platform switches L2B before 05.3.07 and L2E, L2P, L3E, and L3P before 09.0.06 sets an SNMP community to the same string as the administrator password, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2016-2509

The password-sync feature on Belden Hirschmann Classic Platform switches L2B before 05.3.07 and L2E, L2P, L3E, and L3P before 09.0.06 sets an SNMP community to the same string as the administrator password, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2016-2509

CVE-2016-2509 concerns Belden Hirschmann Classic Platform switches. The password-sync feature on affected devices (L2B prior to 05.3.07; L2E, L2P, L3E, L3P prior to 09.0.06) can set the SNMP community to the same string as the administrator password, enabling remote attackers to obtain sensitive ...