Belden HiOS授权问题漏洞

Belden HiOS is an operating system for Ethernet switches from Belden, Inc. A security vulnerability exists in Hirschmann HiOS 07.1.01, 07.1.02, and 08.1.00 through 08.5.xx and HiSecOS 03.3.00 through 03.5.01, which could be exploited by a remote attacker to alter the credentials of an existing us...

The vulnerability of the HiOS operating system with respect to Belden Hirschmann’s OS2, RSP, and RSPE network switches allows a hacker to cause maintenance failures.

The vulnerability of the HiOS operating system regarding Belden Hirschmann’s OS2, RSP, and RSPE network switches is related to resource release errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

Belden HiOS and HiSecOS Buffer Overflow Vulnerabilities

Belden HiOS and Belden HiSecOS are both products of Belden, Inc. Belden HiOS is an operating system for Ethernet switches and Belden HiSecOS is an operating system for industrial security routers. A buffer overflow vulnerability exists in Belden HiOS and HiSecOS. The vulnerability originates when...

The vulnerability of the HTTP(S) software control modules of Belden Hirschmann HiOS and Belden Hirschmann HiSecOS allows a perpetrator to gain unauthorized access to confidential information.

The vulnerability of the HTTPS software control modules of Belden Hirschmann HiOS and Belden Hirschmann HiSecOS relates to errors in handling authentication requests. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to sensitive information through specially...

The vulnerability of the web interface of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS allows a intruder to gain unauthorized access and intercept web sessions.

The vulnerability of Belden Hirschmann’s network switch web interfaces for models series RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS is related to improper session management. Exploiting this vulnerability can allow an attacker to gain unauthorized access and intercept web sessions...

The vulnerability of the web interface of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS allows a perpetrator to execute a type of attack known as “man-in-the-middle” attack.

The vulnerability of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS lies in the transmission of confidential information in the form of plain text. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attac...

The vulnerability of the web interface of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS allows a perpetrator to carry out a “man-in-the-middle” attack.

The vulnerability of web interfaces of network switches from Belden Hirschmann, series RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS, is related to weak encryption. Exploiting this vulnerability can allow a remote attacker to execute a “man-in-the-middle” attack...

The vulnerability of the web interface of Belden Hirschmann’s network switches of the RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS series allows a hacker to disclose protected information.

The vulnerability of the web interface of Belden Hirschmann’s network switches series RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS is related to errors in processing GET requests. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a GET...

The vulnerability of the web interface of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS allows a perpetrator to carry out a brute-force attack.

The vulnerability of Belden Hirschmann’s network switches models RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS lies in the insufficient limitation on authentication attempts. Exploiting this vulnerability allows a remote attacker to execute a brute-force attack...

User Forgery Vulnerability in Multiple Belden Hirschmann Switch Products

Belden Hirschmann RS, etc. are switch products of Belden USA. A security vulnerability exists in the web interface in several Belden Hirschmann switch products. An attacker could exploit the vulnerability to spoof legitimate users...

Man-in-the-middle attack vulnerability in multiple Belden Hirschmann switch products (CNVD-2018-04783)

Belden Hirschmann RS, etc. are switch products of Belden USA. A security vulnerability exists in the web interface of several Belden Hirschmann switch products. An attacker could exploit this vulnerability to obtain sensitive information by performing a man-in-the-middle attack...

Multiple Belden Hirschmann Switch Products Brute Force Vulnerabilities

Belden Hirschmann RS, etc. are switch products of Belden USA. A security vulnerability exists in the web interface of multiple Belden Hirschmann switch products, which stems from the program failing to properly limit the number of authentication requests. An attacker could use this vulnerability ...

Session Hijacking Vulnerability in Multiple Belden Hirschmann Switch Products

Belden Hirschmann RS, etc. are switch products of Belden USA. A session fixation vulnerability exists in the web interface in several Belden Hirschmann switch products. An attacker can exploit this vulnerability to hijack a web session...

Man-in-the-middle Attack Vulnerability in Multiple Belden Hirschmann Switch Products

Belden Hirschmann RS, etc. are switch products of Belden USA. A security vulnerability exists in the web interface of several Belden Hirschmann switch products, which originates from a program that passes sensitive information in clear text. An attacker could exploit this vulnerability to obtain...

CVE-2018-5471

A Cleartext Transmission of Sensitive Information issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. A cleartext transmission of sensitive information vulnerability in the web interface has been identified, which may all...

CVE-2018-5461

An Inadequate Encryption Strength issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An inadequate encryption strength vulnerability in the web interface has been identified, which may allow an attacker to obtain sensiti...

Session fixation

A Session Fixation issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. A session fixation vulnerability in the web interface has been identified, which may allow an attacker to hijack web sessions...

Authentication flaw

An Improper Restriction of Excessive Authentication Attempts issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An improper restriction of excessive authentication vulnerability in the web interface has been identified,...

Design/Logic Flaw

An Inadequate Encryption Strength issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An inadequate encryption strength vulnerability in the web interface has been identified, which may allow an attacker to obtain sensiti...

CVE-2018-5469

An Improper Restriction of Excessive Authentication Attempts issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An improper restriction of excessive authentication vulnerability in the web interface has been identified,...