What’s Vulnerable › Vulnerabilities

CVE-2018-5461

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-03-06 · updated 2026-06-17
• Weakness: CWE-326

Description

An Inadequate Encryption Strength issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An inadequate encryption strength vulnerability in the web interface has been identified, which may allow an attacker to obtain sensitive information through a successful man-in-the-middle attack.

Affected products

• Belden Hirschmann M1-8Mm-Sc: all versions
• Belden Hirschmann M1-8Sfp: all versions
• Belden Hirschmann M1-8Sm-Sc: all versions
• Belden Hirschmann M1-8Tp-Rj45: all versions
• Belden Hirschmann Mach102-24Tp-F: all versions
• Belden Hirschmann Mach102-24Tp-Fr: all versions
• Belden Hirschmann Mach102-8Tp: all versions
• Belden Hirschmann Mach102-8Tp-F: all versions
• Belden Hirschmann Mach102-8Tp-Fr: all versions
• Belden Hirschmann Mach102-8Tp-R: all versions
• Belden Hirschmann Mach104-16Tx-Poep: all versions
• Belden Hirschmann Mach104-16Tx-Poep-L3P: all versions
• Belden Hirschmann Mach104-16Tx-Poep +2X: all versions
• Belden Hirschmann Mach104-16Tx-Poep +2X-L3P: all versions
• Belden Hirschmann Mach104-16Tx-Poep +2X -E: all versions
• Belden Hirschmann Mach104-16Tx-Poep +2X -E-L3P: all versions
• Belden Hirschmann Mach104-16Tx-Poep +2X -R: all versions
• Belden Hirschmann Mach104-16Tx-Poep +2X -R-L3P: all versions
• Belden Hirschmann Mach104-16Tx-Poep -E: all versions
• Belden Hirschmann Mach104-16Tx-Poep -E-L3P: all versions
• Belden Hirschmann Mach104-16Tx-Poep -R: all versions
• Belden Hirschmann Mach104-16Tx-Poep -R-L3P: all versions
• Belden Hirschmann Mach104-20Tx-F: all versions
• Belden Hirschmann Mach104-20Tx-F-4Poe: all versions
• Belden Hirschmann Mach104-20Tx-F-L3P: all versions
• Belden Hirschmann Mach104-20Tx-Fr: all versions
• Belden Hirschmann Mach104-20Tx-Fr-L3P: all versions
• Belden Hirschmann Mach4002-24G+3X-L2P: all versions
• Belden Hirschmann Mach4002-24G+3X-L3E: all versions
• Belden Hirschmann Mach4002-24G+3X-L3P: all versions

References

• http://www.securityfocus.com/bid/103340
• https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01
• http://www.securityfocus.com/bid/103340
• https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01

Get alerted when CVE-2018-5461 or the next vulnerability affects your stack