CVE-2016-15058

CVE-2016-15058 affects Hirschmann HiLCOS Classic Platform switches (Classic L2E, L2P, L3E, L3P < 09.0.06 and Classic L2B

CVE-2016-15058: Storing Passwords in a Recoverable Format

Hirschmann HiLCOS Classic Platform switches Classic L2E, L2P, L3E, L3P versions prior to 09.0.06 and Classic L2B prior to 05.3.07 contain a credential exposure vulnerability where user passwords are synchronized with SNMPv1/v2 community strings and transmitted in plaintext when the feature is...

Belden’s various products have security vulnerabilities

Belden Hirschmann HiLCOS OpenBAT, among others, are products of the American company Belden. Belden Hirschmann HiLCOS OpenBAT is an industrial-grade wireless local area network device. Belden Hirschmann HiLCOS BAT450 is an industrial-grade wireless local area network access point device. Belden...

CVE-2018-5471: Cleartext Transmission of Sensitive Information

A Cleartext Transmission of Sensitive Information issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. A cleartext transmission of sensitive information vulnerability in the web interface has been identified, which may all...

CVE-2018-5469: Improper Restriction of Excessive Authentication Attempts

An Improper Restriction of Excessive Authentication Attempts issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An improper restriction of excessive authentication vulnerability in the web interface has been identified,...

PT-2018-3421

Name of the Vulnerable Software and Affected Versions: Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches affected versions not specified Description: An issue with improper restriction of excessive authentication attempts was found in the web...

Hirschmann Automation and Control GmbH Classic Platform Switches

CVSS v3 7.5 ATTENTION: Exploitable remotely/high skill level is needed to exploit. Vendor: Hirschmann Automation and Control GmbH, a division of Belden Inc. Equipment: Classic Platform Switches Vulnerabilities: Session Fixation, Information Exposure Through Query Strings in GET Request, Cleartext...

PT-2017-10: Information Disclosure in Hirschmann Automation and Control GmbH Classic Platform Switches

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Hirschmann Automation and Control GmbH Classic Platform Switches. Vulnerability in the web interface of Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic...

PT-2017-09: Information Disclosure in Hirschmann Automation and Control GmbH Classic Platform Switches

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Hirschmann Automation and Control GmbH Classic Platform Switches. A cleartext transmission of information vulnerability in the web interface of Belden Hirschmann RS, RSR, RSB, MACH100, MACH100...

Belden Hirschmann Classic Platform switches L2B Information Disclosure Vulnerability

Belden Hirschmann Classic Platform switches are switch products from Belden USA. An information disclosure vulnerability exists in Belden Hirschmann Classic Platform switches L2B prior to 05.3.07 and L2E, L2P, L3E,L3P prior to 09.0.06, which allows remote attackers to obtain sensitive information...

CVE-2016-2509

The password-sync feature on Belden Hirschmann Classic Platform switches L2B before 05.3.07 and L2E, L2P, L3E, and L3P before 09.0.06 sets an SNMP community to the same string as the administrator password, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2016-2509

CVE-2016-2509 concerns Belden Hirschmann Classic Platform switches. The password-sync feature on affected devices (L2B prior to 05.3.07; L2E, L2P, L3E, L3P prior to 09.0.06) can set the SNMP community to the same string as the administrator password, enabling remote attackers to obtain sensitive ...

CVE-2016-2509: Exposure of Sensitive Information to an Unauthorized Actor

The password-sync feature on Belden Hirschmann Classic Platform switches L2B before 05.3.07 and L2E, L2P, L3E, and L3P before 09.0.06 sets an SNMP community to the same string as the administrator password, which allows remote attackers to obtain sensitive information by sniffing the network...

PT-2016-5171

Name of the Vulnerable Software and Affected Versions Belden Hirschmann Classic Platform switches L2B versions prior to 05.3.07 Belden Hirschmann Classic Platform switches L2E, L2P, L3E, and L3P versions prior to 09.0.06 Description The password-sync feature sets an SNMP community to the same...

Hirschmann "Classic Platform" switches reveal administrator password in SNMP community string by default

Overview Hirschmann "Classic Platform" switches contain a password sync feature that syncs the switch administrator password with the SNMP community password, exposing the administrator password to attackers on the local network. Description CWE-257: Storing Passwords in a Recoverable Format For...