Details of VAR-201803-2088

ID

VAR-201803-2088

CVE

CVE-2018-5467

TITLE

plural Belden Hirschmann Information disclosure vulnerabilities in products

Trust: 0.8

sources: JVNDB: JVNDB-2018-002739

DESCRIPTION

An Information Exposure Through Query Strings in GET Request issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate a legitimate user. plural Belden Hirschmann The product contains an information disclosure vulnerability and an access control vulnerability.The information may be obtained and the information may be falsified. BeldenHirschmannRS and other are the switch products of the Belden company in the United States. There are security holes in the web interface in several BeldenHirschmann switch products. An attacker can exploit this vulnerability to spoof legitimate users. 1. Session Hijacking Vulnerability 2. An information-disclosure vulnerability 3. A security-bypass vulnerability 4. A security weakness vulnerability 5. An authentication-bypass vulnerability An attacker can exploit this issue to bypass the authentication, obtain sensitive information and gain unauthorized access using brute-force attacks. Successfully exploiting this issue may lead to further attacks

Trust: 2.61

sources: NVD: CVE-2018-5467 // JVNDB: JVNDB-2018-002739 // CNVD: CNVD-2018-04785 // BID: 103340 // IVD: e2e4b11e-39ab-11e9-a5a5-000c29342cb1

IOT TAXONOMY

category:	['ICS', 'Network device']	sub_category:	-	Trust: 0.6
category:	['ICS']	sub_category:	-	Trust: 0.2

sources: IVD: e2e4b11e-39ab-11e9-a5a5-000c29342cb1 // CNVD: CNVD-2018-04785

AFFECTED PRODUCTS

vendor:	belden	model:	hirschmann rs20-1600l2s2sdau	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann rs20-1600s2t1sdau	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann rsr20	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann rs20-1600m2m2sdau	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann rs20-1600s2s2sdau	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann rs20-1600l2l2sdau	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann rs20-1600l2t1sdau	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann rsr30	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann rs20-1600s2m2sdau	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann rs20-1600m2t1sdau	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann rs	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann rsr	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann rsb	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann mach100	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann mach1000	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann mach4000	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann ms	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann octopus	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann mach4002-24g-l2p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os24-080900t5t5tnebhh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-16tx-poep-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os30-0008024b4btrephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-20tx-f-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 8m-train-bp	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 8m-8poe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-0010001s1strephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-001000t5t5tafuhb	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800t1t1taabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900s2ttsaabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 16m-train	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann m1-8tp-rj45	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900mmm2saab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os32-080802t6t6tpephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-20tx-f	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 24m	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-48g-l3e	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-0010001m1mtrephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900mmm2taab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800m2m2taabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 16m-train-bp	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os30-0008021a1atrephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach102-8tp-f	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800t1t1saab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os30-0008024a4atrephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach102-24tp-f	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900zzz6taab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-16tx-poep -r	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900vvm2taabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 8m	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-16tx-poep \+2x -r-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach102-8tp-fr	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms20-0800eccp	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900mmm2saabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900s2tttaab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os32-081602o6o6tpephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800s2s2saab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-16tx-poep \+2x -r	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 24m-8 poe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os30	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800t1t1taab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 8m-train	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 5tx eec	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-0900nnm4tdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-24g\+3x-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-20tx-fr	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms20-0800saae	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800t1t1saabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900vvm2saabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-24g\+3x-l2p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900s2tttaabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-1600l2m2sdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os24-081000t5t5tffuhb	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-000900t5t5tnebhh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 24m-train-bp	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os24-081000t5t5tneuhb	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900zzz6taabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-16tx-poep -e	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os30-0008021b1btrephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-48g\+3x-l3e	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 8tx-eec	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800m2m2saab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os32-081602t6t6tpephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 8tx poe-eec	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-48g\+3x-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900vvm2taab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900s2ttsaab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-16tx-poep \+2x -e-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 16m-8poe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os3x-xx24xxx	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach102-8tp-r	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-16tx-poep -e-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-48g-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900m2ttsaabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800m2m2taab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann m1-8sfp	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach102-8tp	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-24g-l3e	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-24g-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-16tx-poep -r-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms20-1600eccp	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-0010004m4mtrephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800s2s2taabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-16tx-poep	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-20tx-f-4poe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900zzz6saabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900vvm2saab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 24m-train	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900m2tttaabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 8m-6poe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-20tx-fr-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann m1-8mm-sc	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-0900vvm2tdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-48g-l2p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms20-1600saae	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann m1-8sm-sc	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms30-0802saae	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-0010004s4strephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms20-1600saap	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os3x-xx16xxx	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-48g\+3x-l2p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-001000t5t5tneuhb	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800s2s2taab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900m2tttaab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-16tx-poep \+2x-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms30-0802saap	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800m2m2saabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900m2ttsaab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-16tx-poep \+2x -e	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-24g\+3x-l3e	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900mmm2taabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 16m	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms30-1602saae	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900zzz6saab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach102-24tp-fr	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os24-080900t5t5tffbhh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-000900t5t5tafbhh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-16tx-poep \+2x	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os34	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800s2s2saabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os32-080802o6o6tpephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms20-0800saap	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-0900mmm2tdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	rsr	scope:	eq	version:	0	Trust: 0.3
vendor:	belden	model:	rsb	scope:	eq	version:	0	Trust: 0.3
vendor:	belden	model:	rs	scope:	eq	version:	0	Trust: 0.3
vendor:	belden	model:	octopus	scope:	eq	version:	0	Trust: 0.3
vendor:	belden	model:	ms	scope:	eq	version:	0	Trust: 0.3
vendor:	belden	model:	mach4000	scope:	eq	version:	0	Trust: 0.3
vendor:	belden	model:	mach1000	scope:	eq	version:	0	Trust: 0.3
vendor:	belden	model:	mach100	scope:	eq	version:	0	Trust: 0.3
vendor:	hirschmann rs20 0900mmm2tdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 0900nnm4tdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 0900vvm2tdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600l2l2sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600l2m2sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600l2s2sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600l2t1sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600m2m2sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600m2t1sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600s2m2sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600s2s2sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600s2t1sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsr20	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsr30	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800m2m2saab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800m2m2saabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800m2m2taab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800m2m2taabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800s2s2saab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800s2s2saabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800s2s2taab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800s2s2taabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800t1t1saab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800t1t1saabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800t1t1taab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800t1t1taabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900m2ttsaab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900m2ttsaabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900m2tttaab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900m2tttaabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900mmm2saab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900mmm2saabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900mmm2taab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900mmm2taabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900s2ttsaab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900s2ttsaabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900s2tttaab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900s2tttaabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900vvm2saab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900vvm2saabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900vvm2taab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900vvm2taabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900zzz6saab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900zzz6saabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900zzz6taab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900zzz6taabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann m1 8mm sc	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann m1 8sfp	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann m1 8sm sc	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann m1 8tp rj45	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach102 24tp f	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach102 24tp fr	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach102 8tp	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach102 8tp f	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach102 8tp fr	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach102 8tp r	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep 2x	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep 2x l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep 2x e	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep 2x e l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep 2x r	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep 2x r l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep e	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep e l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep r	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep r l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 20tx f	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 20tx f 4poe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 20tx f l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 20tx fr	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 20tx fr l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 24g 3x l2p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 24g 3x l3e	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 24g 3x l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 24g l2p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 24g l3e	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 24g l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 48g 3x l2p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 48g 3x l3e	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 48g 3x l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 48g l2p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 48g l3e	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 48g l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms20 0800eccp	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms20 0800saae	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms20 0800saap	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms20 1600eccp	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms20 1600saae	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms20 1600saap	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms30 0802saae	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms30 0802saap	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms30 1602saae	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 16m	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 16m 8poe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 16m train	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 16m train bp	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 24m	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 24m 8 poe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 24m train	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 24m train bp	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 5tx eec	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 8m	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 8m 6poe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 8m 8poe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 8m train	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 8m train bp	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 8tx eec	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 8tx poe eec	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 000900t5t5tafbhh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 000900t5t5tnebhh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 0010001m1mtrephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 0010001s1strephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 0010004m4mtrephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 0010004s4strephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 001000t5t5tafuhb	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 001000t5t5tneuhb	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os24 080900t5t5tffbhh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os24 080900t5t5tnebhh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os24 081000t5t5tffuhb	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os24 081000t5t5tneuhb	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os30	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os30 0008021a1atrephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os30 0008021b1btrephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os30 0008024a4atrephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os30 0008024b4btrephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os32 080802o6o6tpephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os32 080802t6t6tpephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os32 081602o6o6tpephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os32 081602t6t6tpephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os34	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os3x xx16xxx	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os3x xx24xxx	model:	-	scope:	eq	version:	-	Trust: 0.2

sources: IVD: e2e4b11e-39ab-11e9-a5a5-000c29342cb1 // CNVD: CNVD-2018-04785 // BID: 103340 // JVNDB: JVNDB-2018-002739 // CNNVD: CNNVD-201803-138 // NVD: CVE-2018-5467

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2018-5467
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2018-5467
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2018-04785
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201803-138
value:	MEDIUM
Trust: 0.6
IVD:	e2e4b11e-39ab-11e9-a5a5-000c29342cb1
value:	MEDIUM
Trust: 0.2

nvd@nist.gov:	CVE-2018-5467
severity:	MEDIUM
baseScore:	6.4
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	4.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2018-04785
severity:	MEDIUM
baseScore:	4.0
vectorString:	AV:N/AC:H/AU:N/C:P/I:P/A:N
accessVector:	NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	4.9
impactScore:	4.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	e2e4b11e-39ab-11e9-a5a5-000c29342cb1
severity:	MEDIUM
baseScore:	4.0
vectorString:	AV:N/AC:H/AU:N/C:P/I:P/A:N
accessVector:	NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	4.9
impactScore:	4.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2

nvd@nist.gov:	CVE-2018-5467
baseSeverity:	MEDIUM
baseScore:	6.5
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	2.5
version:	3.0
Trust: 1.8

sources: IVD: e2e4b11e-39ab-11e9-a5a5-000c29342cb1 // CNVD: CNVD-2018-04785 // JVNDB: JVNDB-2018-002739 // CNNVD: CNNVD-201803-138 // NVD: CVE-2018-5467

PROBLEMTYPE DATA

problemtype:	CWE-200	Trust: 1.8
problemtype:	CWE-598	Trust: 1.0
problemtype:	CWE-284	Trust: 0.8

sources: JVNDB: JVNDB-2018-002739 // NVD: CVE-2018-5467

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201803-138

TYPE

information disclosure

Trust: 0.6

sources: CNNVD: CNNVD-201803-138

CONFIGURATIONS

sources: JVNDB: JVNDB-2018-002739

PATCH

title:

Top Page

url:

http://www.hirschmann.com/

Trust: 0.8

sources: JVNDB: JVNDB-2018-002739

EXTERNAL IDS

db:	NVD	id:	CVE-2018-5467	Trust: 3.5
db:	ICS CERT	id:	ICSA-18-065-01	Trust: 3.3
db:	BID	id:	103340	Trust: 1.9
db:	CNVD	id:	CNVD-2018-04785	Trust: 0.8
db:	CNNVD	id:	CNNVD-201803-138	Trust: 0.8
db:	JVNDB	id:	JVNDB-2018-002739	Trust: 0.8
db:	IVD	id:	E2E4B11E-39AB-11E9-A5A5-000C29342CB1	Trust: 0.2

sources: IVD: e2e4b11e-39ab-11e9-a5a5-000c29342cb1 // CNVD: CNVD-2018-04785 // BID: 103340 // JVNDB: JVNDB-2018-002739 // CNNVD: CNNVD-201803-138 // NVD: CVE-2018-5467

REFERENCES

url:	https://ics-cert.us-cert.gov/advisories/icsa-18-065-01	Trust: 3.3
url:	http://www.securityfocus.com/bid/103340	Trust: 1.6
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-5467	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2018-5467	Trust: 0.8
url:	https://www.belden.com/	Trust: 0.3

sources: CNVD: CNVD-2018-04785 // BID: 103340 // JVNDB: JVNDB-2018-002739 // CNNVD: CNNVD-201803-138 // NVD: CVE-2018-5467

CREDITS

Ilya Karpov, Evgeniy Druzhinin, Mikhail Tsvetkov, and Damir Zainullin of Positive Technologies.

Trust: 0.3

sources: BID: 103340

SOURCES

db:	IVD	id:	e2e4b11e-39ab-11e9-a5a5-000c29342cb1
db:	CNVD	id:	CNVD-2018-04785
db:	BID	id:	103340
db:	JVNDB	id:	JVNDB-2018-002739
db:	CNNVD	id:	CNNVD-201803-138
db:	NVD	id:	CVE-2018-5467

LAST UPDATE DATE

2024-11-23T22:26:26.096000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2018-04785	date:	2018-03-09T00:00:00
db:	BID	id:	103340	date:	2018-03-06T00:00:00
db:	JVNDB	id:	JVNDB-2018-002739	date:	2018-04-26T00:00:00
db:	CNNVD	id:	CNNVD-201803-138	date:	2019-10-17T00:00:00
db:	NVD	id:	CVE-2018-5467	date:	2024-11-21T04:08:51.463

SOURCES RELEASE DATE

db:	IVD	id:	e2e4b11e-39ab-11e9-a5a5-000c29342cb1	date:	2018-03-09T00:00:00
db:	CNVD	id:	CNVD-2018-04785	date:	2018-03-09T00:00:00
db:	BID	id:	103340	date:	2018-03-06T00:00:00
db:	JVNDB	id:	JVNDB-2018-002739	date:	2018-04-26T00:00:00
db:	CNNVD	id:	CNNVD-201803-138	date:	2018-03-07T00:00:00
db:	NVD	id:	CVE-2018-5467	date:	2018-03-06T21:29:00.347