CVEvulnerability

CVE-2018-5467

6.5 MEDIUM Published 2018-03-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-03-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
CWE-200, CWE-598

Description

An Information Exposure Through Query Strings in GET Request issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate a legitimate user.

Affected configurations

• belden hirschmann rs20-0900mmm2tdau • belden hirschmann rs20-0900nnm4tdau • belden hirschmann rs20-0900vvm2tdau • belden hirschmann rs20-1600l2l2sdau • belden hirschmann rs20-1600l2m2sdau • belden hirschmann rs20-1600l2s2sdau • belden hirschmann rs20-1600l2t1sdau • belden hirschmann rs20-1600m2m2sdau • belden hirschmann rs20-1600m2t1sdau • belden hirschmann rs20-1600s2m2sdau • belden hirschmann rs20-1600s2s2sdau • belden hirschmann rs20-1600s2t1sdau • belden hirschmann rsr20 • belden hirschmann rsr30 • belden hirschmann rsb20-0800m2m2saab • belden hirschmann rsb20-0800m2m2saabe • belden hirschmann rsb20-0800m2m2taab • belden hirschmann rsb20-0800m2m2taabe • belden hirschmann rsb20-0800s2s2saab • belden hirschmann rsb20-0800s2s2saabe • belden hirschmann rsb20-0800s2s2taab • belden hirschmann rsb20-0800s2s2taabe • belden hirschmann rsb20-0800t1t1saab • belden hirschmann rsb20-0800t1t1saabe • belden hirschmann rsb20-0800t1t1taab • belden hirschmann rsb20-0800t1t1taabe • belden hirschmann rsb20-0900m2ttsaab • belden hirschmann rsb20-0900m2ttsaabe • belden hirschmann rsb20-0900m2tttaab • belden hirschmann rsb20-0900m2tttaabe • belden hirschmann rsb20-0900mmm2saab • belden hirschmann rsb20-0900mmm2saabe • belden hirschmann rsb20-0900mmm2taab • belden hirschmann rsb20-0900mmm2taabe • belden hirschmann rsb20-0900s2ttsaab • belden hirschmann rsb20-0900s2ttsaabe • belden hirschmann rsb20-0900s2tttaab • belden hirschmann rsb20-0900s2tttaabe • belden hirschmann rsb20-0900vvm2saab • belden hirschmann rsb20-0900vvm2saabe • belden hirschmann rsb20-0900vvm2taab • belden hirschmann rsb20-0900vvm2taabe • belden hirschmann rsb20-0900zzz6saab • belden hirschmann rsb20-0900zzz6saabe • belden hirschmann rsb20-0900zzz6taab • belden hirschmann rsb20-0900zzz6taabe • belden hirschmann m1-8mm-sc • belden hirschmann m1-8sfp • belden hirschmann m1-8sm-sc • belden hirschmann m1-8tp-rj45 • belden hirschmann mach102-24tp-f • belden hirschmann mach102-24tp-fr • belden hirschmann mach102-8tp • belden hirschmann mach102-8tp-f • belden hirschmann mach102-8tp-fr • belden hirschmann mach102-8tp-r • belden hirschmann mach104-16tx-poep • belden hirschmann mach104-16tx-poep-l3p • belden hirschmann mach104-16tx-poep \+2x • belden hirschmann mach104-16tx-poep \+2x-l3p … and 74 more

Related

Weakness · CWE (2)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
  • CWE-598 Use of HTTP Request With Sensitive Query String weakness

References