CVEvulnerability
CVE-2018-5465
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-03-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-384
Description
A Session Fixation issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. A session fixation vulnerability in the web interface has been identified, which may allow an attacker to hijack web sessions.
Affected configurations
• belden hirschmann rs20-0900mmm2tdau
• belden hirschmann rs20-0900nnm4tdau
• belden hirschmann rs20-0900vvm2tdau
• belden hirschmann rs20-1600l2l2sdau
• belden hirschmann rs20-1600l2m2sdau
• belden hirschmann rs20-1600l2s2sdau
• belden hirschmann rs20-1600l2t1sdau
• belden hirschmann rs20-1600m2m2sdau
• belden hirschmann rs20-1600m2t1sdau
• belden hirschmann rs20-1600s2m2sdau
• belden hirschmann rs20-1600s2s2sdau
• belden hirschmann rs20-1600s2t1sdau
• belden hirschmann rsr20
• belden hirschmann rsr30
• belden hirschmann rsb20-0800m2m2saab
• belden hirschmann rsb20-0800m2m2saabe
• belden hirschmann rsb20-0800m2m2taab
• belden hirschmann rsb20-0800m2m2taabe
• belden hirschmann rsb20-0800s2s2saab
• belden hirschmann rsb20-0800s2s2saabe
• belden hirschmann rsb20-0800s2s2taab
• belden hirschmann rsb20-0800s2s2taabe
• belden hirschmann rsb20-0800t1t1saab
• belden hirschmann rsb20-0800t1t1saabe
• belden hirschmann rsb20-0800t1t1taab
• belden hirschmann rsb20-0800t1t1taabe
• belden hirschmann rsb20-0900m2ttsaab
• belden hirschmann rsb20-0900m2ttsaabe
• belden hirschmann rsb20-0900m2tttaab
• belden hirschmann rsb20-0900m2tttaabe
• belden hirschmann rsb20-0900mmm2saab
• belden hirschmann rsb20-0900mmm2saabe
• belden hirschmann rsb20-0900mmm2taab
• belden hirschmann rsb20-0900mmm2taabe
• belden hirschmann rsb20-0900s2ttsaab
• belden hirschmann rsb20-0900s2ttsaabe
• belden hirschmann rsb20-0900s2tttaab
• belden hirschmann rsb20-0900s2tttaabe
• belden hirschmann rsb20-0900vvm2saab
• belden hirschmann rsb20-0900vvm2saabe
• belden hirschmann rsb20-0900vvm2taab
• belden hirschmann rsb20-0900vvm2taabe
• belden hirschmann rsb20-0900zzz6saab
• belden hirschmann rsb20-0900zzz6saabe
• belden hirschmann rsb20-0900zzz6taab
• belden hirschmann rsb20-0900zzz6taabe
• belden hirschmann m1-8mm-sc
• belden hirschmann m1-8sfp
• belden hirschmann m1-8sm-sc
• belden hirschmann m1-8tp-rj45
• belden hirschmann mach102-24tp-f
• belden hirschmann mach102-24tp-fr
• belden hirschmann mach102-8tp
• belden hirschmann mach102-8tp-f
• belden hirschmann mach102-8tp-fr
• belden hirschmann mach102-8tp-r
• belden hirschmann mach104-16tx-poep
• belden hirschmann mach104-16tx-poep-l3p
• belden hirschmann mach104-16tx-poep \+2x
• belden hirschmann mach104-16tx-poep \+2x-l3p
… and 74 more
Related
Weakness · CWE (1)
- CWE-384 Session Fixation weakness
References
- http://www.securityfocus.com/bid/103340 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01 Mitigation, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/103340 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01 Mitigation, Third Party Advisory, US Government Resource