What’s Vulnerable › Vulnerabilities

CVE-2018-5467

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-03-06 · updated 2026-06-17
• Weakness: CWE-598

Description

An Information Exposure Through Query Strings in GET Request issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate a legitimate user.

Affected products

• Belden Hirschmann M1-8Mm-Sc: all versions
• Belden Hirschmann M1-8Sfp: all versions
• Belden Hirschmann M1-8Sm-Sc: all versions
• Belden Hirschmann M1-8Tp-Rj45: all versions
• Belden Hirschmann Mach102-24Tp-F: all versions
• Belden Hirschmann Mach102-24Tp-Fr: all versions
• Belden Hirschmann Mach102-8Tp: all versions
• Belden Hirschmann Mach102-8Tp-F: all versions
• Belden Hirschmann Mach102-8Tp-Fr: all versions
• Belden Hirschmann Mach102-8Tp-R: all versions
• Belden Hirschmann Mach104-16Tx-Poep: all versions
• Belden Hirschmann Mach104-16Tx-Poep-L3P: all versions
• Belden Hirschmann Mach104-16Tx-Poep +2X: all versions
• Belden Hirschmann Mach104-16Tx-Poep +2X-L3P: all versions
• Belden Hirschmann Mach104-16Tx-Poep +2X -E: all versions
• Belden Hirschmann Mach104-16Tx-Poep +2X -E-L3P: all versions
• Belden Hirschmann Mach104-16Tx-Poep +2X -R: all versions
• Belden Hirschmann Mach104-16Tx-Poep +2X -R-L3P: all versions
• Belden Hirschmann Mach104-16Tx-Poep -E: all versions
• Belden Hirschmann Mach104-16Tx-Poep -E-L3P: all versions
• Belden Hirschmann Mach104-16Tx-Poep -R: all versions
• Belden Hirschmann Mach104-16Tx-Poep -R-L3P: all versions
• Belden Hirschmann Mach104-20Tx-F: all versions
• Belden Hirschmann Mach104-20Tx-F-4Poe: all versions
• Belden Hirschmann Mach104-20Tx-F-L3P: all versions
• Belden Hirschmann Mach104-20Tx-Fr: all versions
• Belden Hirschmann Mach104-20Tx-Fr-L3P: all versions
• Belden Hirschmann Mach4002-24G+3X-L2P: all versions
• Belden Hirschmann Mach4002-24G+3X-L3E: all versions
• Belden Hirschmann Mach4002-24G+3X-L3P: all versions

References

• http://www.securityfocus.com/bid/103340
• https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01
• http://www.securityfocus.com/bid/103340
• https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01

Get alerted when CVE-2018-5467 or the next vulnerability affects your stack