What’s Vulnerable › Vulnerabilities

CVE-2017-6036

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-06-30 · updated 2026-06-17
• Weakness: CWE-918

Description

A Server-Side Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. The web server receives a request, but does not sufficiently verify that the request is being sent to the expected destination.

Affected products

• Belden Hirschmann GECKO: through 2.0.00

References

• https://ics-cert.us-cert.gov/advisories/ICSA-17-026-02A
• https://ics-cert.us-cert.gov/advisories/ICSA-17-026-02A

Get alerted when CVE-2017-6036 or the next vulnerability affects your stack