Details of VAR-201803-1818

ID

VAR-201803-1818

CVE

CVE-2018-5469

TITLE

plural Belden Hirschmann Vulnerabilities related to security functions in products

Trust: 0.8

sources: JVNDB: JVNDB-2018-002740

DESCRIPTION

An Improper Restriction of Excessive Authentication Attempts issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An improper restriction of excessive authentication vulnerability in the web interface has been identified, which may allow an attacker to brute force authentication. plural Belden Hirschmann The product contains a security feature vulnerability.Information is acquired, information is falsified, and denial of service (DoS) May be in a state. BeldenHirschmannRS and other are the switch products of the Belden company in the United States. A security vulnerability exists in the web interface in several BeldenHirschmann switch products due to the number of times the program failed to properly limit authentication requests. Multiple Belden Products are prone to the following security vulnerabilities. 1. Session Hijacking Vulnerability 2. An information-disclosure vulnerability 3. A security-bypass vulnerability 4. A security weakness vulnerability 5. Successfully exploiting this issue may lead to further attacks

Trust: 2.61

sources: NVD: CVE-2018-5469 // JVNDB: JVNDB-2018-002740 // CNVD: CNVD-2018-04781 // BID: 103340 // IVD: e2e4d831-39ab-11e9-8398-000c29342cb1

IOT TAXONOMY

category:	['ICS', 'Network device']	sub_category:	-	Trust: 0.6
category:	['ICS']	sub_category:	-	Trust: 0.2

sources: IVD: e2e4d831-39ab-11e9-8398-000c29342cb1 // CNVD: CNVD-2018-04781

AFFECTED PRODUCTS

vendor:	belden	model:	hirschmann mach104-16tx-poep -r	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann mach104-16tx-poep \+2x -e	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann mach104-16tx-poep \+2x -r-l3p	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann mach104-16tx-poep -e	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann mach104-16tx-poep -e-l3p	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann mach104-16tx-poep -r-l3p	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann mach104-16tx-poep \+2x -r	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann mach104-16tx-poep \+2x-l3p	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann mach104-20tx-f	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann mach104-16tx-poep \+2x -e-l3p	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann rs	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann rsr	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann rsb	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann mach100	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann mach1000	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann mach4000	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann ms	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann octopus	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann mach4002-24g-l2p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os24-080900t5t5tnebhh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-16tx-poep-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os30-0008024b4btrephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-20tx-f-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 8m-train-bp	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-1600m2m2sdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 8m-8poe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-0010001s1strephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-001000t5t5tafuhb	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800t1t1taabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900s2ttsaabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 16m-train	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-1600l2t1sdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann m1-8tp-rj45	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900mmm2saab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os32-080802t6t6tpephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 24m	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-48g-l3e	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-0010001m1mtrephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900mmm2taab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800m2m2taabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 16m-train-bp	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os30-0008021a1atrephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach102-8tp-f	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800t1t1saab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os30-0008024a4atrephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach102-24tp-f	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900zzz6taab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900vvm2taabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 8m	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach102-8tp-fr	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms20-0800eccp	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900mmm2saabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900s2tttaab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os32-081602o6o6tpephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800s2s2saab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 24m-8 poe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os30	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800t1t1taab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 8m-train	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 5tx eec	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-0900nnm4tdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-24g\+3x-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsr20	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-20tx-fr	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms20-0800saae	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800t1t1saabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900vvm2saabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-24g\+3x-l2p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900s2tttaabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-1600l2m2sdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os24-081000t5t5tffuhb	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-000900t5t5tnebhh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 24m-train-bp	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os24-081000t5t5tneuhb	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900zzz6taabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os30-0008021b1btrephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsr30	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-48g\+3x-l3e	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 8tx-eec	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800m2m2saab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os32-081602t6t6tpephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 8tx poe-eec	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-48g\+3x-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900vvm2taab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900s2ttsaab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 16m-8poe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os3x-xx24xxx	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach102-8tp-r	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-1600l2l2sdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-48g-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900m2ttsaabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800m2m2taab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann m1-8sfp	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach102-8tp	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-24g-l3e	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-24g-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms20-1600eccp	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-0010004m4mtrephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800s2s2taabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-16tx-poep	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-20tx-f-4poe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-1600s2s2sdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900zzz6saabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900vvm2saab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 24m-train	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900m2tttaabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 8m-6poe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-20tx-fr-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann m1-8mm-sc	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-0900vvm2tdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-48g-l2p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms20-1600saae	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann m1-8sm-sc	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-1600l2s2sdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms30-0802saae	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-0010004s4strephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms20-1600saap	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os3x-xx16xxx	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-1600m2t1sdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-48g\+3x-l2p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-001000t5t5tneuhb	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800s2s2taab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900m2tttaab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms30-0802saap	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800m2m2saabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900m2ttsaab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-24g\+3x-l3e	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900mmm2taabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 16m	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms30-1602saae	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-1600s2t1sdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900zzz6saab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach102-24tp-fr	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os24-080900t5t5tffbhh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-000900t5t5tafbhh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-16tx-poep \+2x	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os34	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800s2s2saabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os32-080802o6o6tpephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms20-0800saap	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-1600s2m2sdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-0900mmm2tdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	rsr	scope:	eq	version:	0	Trust: 0.3
vendor:	belden	model:	rsb	scope:	eq	version:	0	Trust: 0.3
vendor:	belden	model:	rs	scope:	eq	version:	0	Trust: 0.3
vendor:	belden	model:	octopus	scope:	eq	version:	0	Trust: 0.3
vendor:	belden	model:	ms	scope:	eq	version:	0	Trust: 0.3
vendor:	belden	model:	mach4000	scope:	eq	version:	0	Trust: 0.3
vendor:	belden	model:	mach1000	scope:	eq	version:	0	Trust: 0.3
vendor:	belden	model:	mach100	scope:	eq	version:	0	Trust: 0.3
vendor:	hirschmann rs20 0900mmm2tdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 0900nnm4tdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 0900vvm2tdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600l2l2sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600l2m2sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600l2s2sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600l2t1sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600m2m2sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600m2t1sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600s2m2sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600s2s2sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600s2t1sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsr20	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsr30	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800m2m2saab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800m2m2saabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800m2m2taab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800m2m2taabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800s2s2saab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800s2s2saabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800s2s2taab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800s2s2taabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800t1t1saab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800t1t1saabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800t1t1taab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800t1t1taabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900m2ttsaab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900m2ttsaabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900m2tttaab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900m2tttaabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900mmm2saab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900mmm2saabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900mmm2taab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900mmm2taabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900s2ttsaab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900s2ttsaabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900s2tttaab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900s2tttaabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900vvm2saab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900vvm2saabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900vvm2taab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900vvm2taabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900zzz6saab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900zzz6saabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900zzz6taab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900zzz6taabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann m1 8mm sc	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann m1 8sfp	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann m1 8sm sc	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann m1 8tp rj45	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach102 24tp f	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach102 24tp fr	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach102 8tp	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach102 8tp f	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach102 8tp fr	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach102 8tp r	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep 2x	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep 2x l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep 2x e	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep 2x e l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep 2x r	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep 2x r l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep e	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep e l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep r	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep r l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 20tx f	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 20tx f 4poe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 20tx f l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 20tx fr	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 20tx fr l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 24g 3x l2p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 24g 3x l3e	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 24g 3x l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 24g l2p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 24g l3e	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 24g l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 48g 3x l2p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 48g 3x l3e	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 48g 3x l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 48g l2p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 48g l3e	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 48g l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms20 0800eccp	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms20 0800saae	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms20 0800saap	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms20 1600eccp	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms20 1600saae	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms20 1600saap	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms30 0802saae	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms30 0802saap	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms30 1602saae	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 16m	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 16m 8poe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 16m train	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 16m train bp	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 24m	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 24m 8 poe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 24m train	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 24m train bp	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 5tx eec	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 8m	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 8m 6poe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 8m 8poe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 8m train	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 8m train bp	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 8tx eec	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 8tx poe eec	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 000900t5t5tafbhh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 000900t5t5tnebhh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 0010001m1mtrephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 0010001s1strephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 0010004m4mtrephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 0010004s4strephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 001000t5t5tafuhb	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 001000t5t5tneuhb	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os24 080900t5t5tffbhh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os24 080900t5t5tnebhh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os24 081000t5t5tffuhb	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os24 081000t5t5tneuhb	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os30	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os30 0008021a1atrephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os30 0008021b1btrephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os30 0008024a4atrephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os30 0008024b4btrephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os32 080802o6o6tpephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os32 080802t6t6tpephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os32 081602o6o6tpephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os32 081602t6t6tpephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os34	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os3x xx16xxx	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os3x xx24xxx	model:	-	scope:	eq	version:	-	Trust: 0.2

sources: IVD: e2e4d831-39ab-11e9-8398-000c29342cb1 // CNVD: CNVD-2018-04781 // BID: 103340 // JVNDB: JVNDB-2018-002740 // CNNVD: CNNVD-201803-137 // NVD: CVE-2018-5469

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2018-5469
value:	CRITICAL
Trust: 1.0
NVD:	CVE-2018-5469
value:	CRITICAL
Trust: 0.8
CNVD:	CNVD-2018-04781
value:	HIGH
Trust: 0.6
CNNVD:	CNNVD-201803-137
value:	CRITICAL
Trust: 0.6
IVD:	e2e4d831-39ab-11e9-8398-000c29342cb1
value:	CRITICAL
Trust: 0.2

nvd@nist.gov:	CVE-2018-5469
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2018-04781
severity:	HIGH
baseScore:	7.6
vectorString:	AV:N/AC:H/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	4.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	e2e4d831-39ab-11e9-8398-000c29342cb1
severity:	HIGH
baseScore:	7.6
vectorString:	AV:N/AC:H/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	4.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2

nvd@nist.gov:	CVE-2018-5469
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.9
version:	3.0
Trust: 1.8

sources: IVD: e2e4d831-39ab-11e9-8398-000c29342cb1 // CNVD: CNVD-2018-04781 // JVNDB: JVNDB-2018-002740 // CNNVD: CNNVD-201803-137 // NVD: CVE-2018-5469

PROBLEMTYPE DATA

problemtype:	CWE-307	Trust: 1.0
problemtype:	CWE-254	Trust: 0.8

sources: JVNDB: JVNDB-2018-002740 // NVD: CVE-2018-5469

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201803-137

TYPE

lack of information

Trust: 0.6

sources: CNNVD: CNNVD-201803-137

CONFIGURATIONS

sources: JVNDB: JVNDB-2018-002740

PATCH

title:

Top Page

url:

http://www.hirschmann.com/

Trust: 0.8

sources: JVNDB: JVNDB-2018-002740

EXTERNAL IDS

db:	NVD	id:	CVE-2018-5469	Trust: 3.5
db:	ICS CERT	id:	ICSA-18-065-01	Trust: 3.3
db:	BID	id:	103340	Trust: 1.9
db:	CNVD	id:	CNVD-2018-04781	Trust: 0.8
db:	CNNVD	id:	CNNVD-201803-137	Trust: 0.8
db:	JVNDB	id:	JVNDB-2018-002740	Trust: 0.8
db:	IVD	id:	E2E4D831-39AB-11E9-8398-000C29342CB1	Trust: 0.2

sources: IVD: e2e4d831-39ab-11e9-8398-000c29342cb1 // CNVD: CNVD-2018-04781 // BID: 103340 // JVNDB: JVNDB-2018-002740 // CNNVD: CNNVD-201803-137 // NVD: CVE-2018-5469

REFERENCES

url:	https://ics-cert.us-cert.gov/advisories/icsa-18-065-01	Trust: 3.3
url:	http://www.securityfocus.com/bid/103340	Trust: 1.6
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-5469	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2018-5469	Trust: 0.8
url:	https://www.belden.com/	Trust: 0.3

sources: CNVD: CNVD-2018-04781 // BID: 103340 // JVNDB: JVNDB-2018-002740 // CNNVD: CNNVD-201803-137 // NVD: CVE-2018-5469

CREDITS

Ilya Karpov, Evgeniy Druzhinin, Mikhail Tsvetkov, and Damir Zainullin of Positive Technologies.

Trust: 0.3

sources: BID: 103340

SOURCES

db:	IVD	id:	e2e4d831-39ab-11e9-8398-000c29342cb1
db:	CNVD	id:	CNVD-2018-04781
db:	BID	id:	103340
db:	JVNDB	id:	JVNDB-2018-002740
db:	CNNVD	id:	CNNVD-201803-137
db:	NVD	id:	CVE-2018-5469

LAST UPDATE DATE

2024-11-23T22:26:25.940000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2018-04781	date:	2018-03-09T00:00:00
db:	BID	id:	103340	date:	2018-03-06T00:00:00
db:	JVNDB	id:	JVNDB-2018-002740	date:	2018-04-26T00:00:00
db:	CNNVD	id:	CNNVD-201803-137	date:	2019-10-17T00:00:00
db:	NVD	id:	CVE-2018-5469	date:	2024-11-21T04:08:51.743

SOURCES RELEASE DATE

db:	IVD	id:	e2e4d831-39ab-11e9-8398-000c29342cb1	date:	2018-03-09T00:00:00
db:	CNVD	id:	CNVD-2018-04781	date:	2018-03-09T00:00:00
db:	BID	id:	103340	date:	2018-03-06T00:00:00
db:	JVNDB	id:	JVNDB-2018-002740	date:	2018-04-26T00:00:00
db:	CNNVD	id:	CNNVD-201803-137	date:	2018-03-07T00:00:00
db:	NVD	id:	CVE-2018-5469	date:	2018-03-06T21:29:00.393