CVEvulnerability
CVE-2018-5469
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-03-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-307
Description
An Improper Restriction of Excessive Authentication Attempts issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An improper restriction of excessive authentication vulnerability in the web interface has been identified, which may allow an attacker to brute force authentication.
Affected configurations
• belden hirschmann rs20-0900mmm2tdau
• belden hirschmann rs20-0900nnm4tdau
• belden hirschmann rs20-0900vvm2tdau
• belden hirschmann rs20-1600l2l2sdau
• belden hirschmann rs20-1600l2m2sdau
• belden hirschmann rs20-1600l2s2sdau
• belden hirschmann rs20-1600l2t1sdau
• belden hirschmann rs20-1600m2m2sdau
• belden hirschmann rs20-1600m2t1sdau
• belden hirschmann rs20-1600s2m2sdau
• belden hirschmann rs20-1600s2s2sdau
• belden hirschmann rs20-1600s2t1sdau
• belden hirschmann rsr20
• belden hirschmann rsr30
• belden hirschmann rsb20-0800m2m2saab
• belden hirschmann rsb20-0800m2m2saabe
• belden hirschmann rsb20-0800m2m2taab
• belden hirschmann rsb20-0800m2m2taabe
• belden hirschmann rsb20-0800s2s2saab
• belden hirschmann rsb20-0800s2s2saabe
• belden hirschmann rsb20-0800s2s2taab
• belden hirschmann rsb20-0800s2s2taabe
• belden hirschmann rsb20-0800t1t1saab
• belden hirschmann rsb20-0800t1t1saabe
• belden hirschmann rsb20-0800t1t1taab
• belden hirschmann rsb20-0800t1t1taabe
• belden hirschmann rsb20-0900m2ttsaab
• belden hirschmann rsb20-0900m2ttsaabe
• belden hirschmann rsb20-0900m2tttaab
• belden hirschmann rsb20-0900m2tttaabe
• belden hirschmann rsb20-0900mmm2saab
• belden hirschmann rsb20-0900mmm2saabe
• belden hirschmann rsb20-0900mmm2taab
• belden hirschmann rsb20-0900mmm2taabe
• belden hirschmann rsb20-0900s2ttsaab
• belden hirschmann rsb20-0900s2ttsaabe
• belden hirschmann rsb20-0900s2tttaab
• belden hirschmann rsb20-0900s2tttaabe
• belden hirschmann rsb20-0900vvm2saab
• belden hirschmann rsb20-0900vvm2saabe
• belden hirschmann rsb20-0900vvm2taab
• belden hirschmann rsb20-0900vvm2taabe
• belden hirschmann rsb20-0900zzz6saab
• belden hirschmann rsb20-0900zzz6saabe
• belden hirschmann rsb20-0900zzz6taab
• belden hirschmann rsb20-0900zzz6taabe
• belden hirschmann m1-8mm-sc
• belden hirschmann m1-8sfp
• belden hirschmann m1-8sm-sc
• belden hirschmann m1-8tp-rj45
• belden hirschmann mach102-24tp-f
• belden hirschmann mach102-24tp-fr
• belden hirschmann mach102-8tp
• belden hirschmann mach102-8tp-f
• belden hirschmann mach102-8tp-fr
• belden hirschmann mach102-8tp-r
• belden hirschmann mach104-16tx-poep
• belden hirschmann mach104-16tx-poep-l3p
• belden hirschmann mach104-16tx-poep \+2x
• belden hirschmann mach104-16tx-poep \+2x-l3p
… and 74 more
Related
Weakness · CWE (1)
- CWE-307 Improper Restriction of Excessive Authentication Attempts weakness
References
- http://www.securityfocus.com/bid/103340 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01 Mitigation, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/103340 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01 Mitigation, Third Party Advisory, US Government Resource