What’s Vulnerable › Vulnerabilities

CVE-2018-5469

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-03-06 · updated 2026-06-17
• Weakness: CWE-307

Description

An Improper Restriction of Excessive Authentication Attempts issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An improper restriction of excessive authentication vulnerability in the web interface has been identified, which may allow an attacker to brute force authentication.

Affected products

• Belden Hirschmann M1-8Mm-Sc: all versions
• Belden Hirschmann M1-8Sfp: all versions
• Belden Hirschmann M1-8Sm-Sc: all versions
• Belden Hirschmann M1-8Tp-Rj45: all versions
• Belden Hirschmann Mach102-24Tp-F: all versions
• Belden Hirschmann Mach102-24Tp-Fr: all versions
• Belden Hirschmann Mach102-8Tp: all versions
• Belden Hirschmann Mach102-8Tp-F: all versions
• Belden Hirschmann Mach102-8Tp-Fr: all versions
• Belden Hirschmann Mach102-8Tp-R: all versions
• Belden Hirschmann Mach104-16Tx-Poep: all versions
• Belden Hirschmann Mach104-16Tx-Poep-L3P: all versions
• Belden Hirschmann Mach104-16Tx-Poep +2X: all versions
• Belden Hirschmann Mach104-16Tx-Poep +2X-L3P: all versions
• Belden Hirschmann Mach104-16Tx-Poep +2X -E: all versions
• Belden Hirschmann Mach104-16Tx-Poep +2X -E-L3P: all versions
• Belden Hirschmann Mach104-16Tx-Poep +2X -R: all versions
• Belden Hirschmann Mach104-16Tx-Poep +2X -R-L3P: all versions
• Belden Hirschmann Mach104-16Tx-Poep -E: all versions
• Belden Hirschmann Mach104-16Tx-Poep -E-L3P: all versions
• Belden Hirschmann Mach104-16Tx-Poep -R: all versions
• Belden Hirschmann Mach104-16Tx-Poep -R-L3P: all versions
• Belden Hirschmann Mach104-20Tx-F: all versions
• Belden Hirschmann Mach104-20Tx-F-4Poe: all versions
• Belden Hirschmann Mach104-20Tx-F-L3P: all versions
• Belden Hirschmann Mach104-20Tx-Fr: all versions
• Belden Hirschmann Mach104-20Tx-Fr-L3P: all versions
• Belden Hirschmann Mach4002-24G+3X-L2P: all versions
• Belden Hirschmann Mach4002-24G+3X-L3E: all versions
• Belden Hirschmann Mach4002-24G+3X-L3P: all versions

References

• http://www.securityfocus.com/bid/103340
• https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01
• http://www.securityfocus.com/bid/103340
• https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01

Get alerted when CVE-2018-5469 or the next vulnerability affects your stack