High ICSA-17-026-02A 4 CVEs

Belden Hirschmann GECKO (Update A)

Published Jan 26, 2017 · Updated Apr 18, 2017 · Revision 2

Vendor: Belden Product: Hirschmann GECKO Lite Managed switch

Summary

ATTENTION: Remotely Exploitable/low skill level to exploit.

Vulnerabilities 4

Unscored —

CVE-2017-5163

An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. After an adm…

Feb 13, 2017
Unscored —

CVE-2017-6036

A Server-Side Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and p…

Jun 30, 2017
Unscored —

CVE-2017-6038

A Cross-Site Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and pr…

Jun 30, 2017
Unscored —

CVE-2017-6040

An Information Exposure issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior v…

Jun 30, 2017

Revision history

2017-04-18 #2
ICSA-17-026-02A Belden Hirschmann GECKO (Update A)
2017-01-26 #1
ICSA-17-026-02 Belden Hirschmann GECKO

References

ICS Advisory ICSA-17-026-02A Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-026-02a
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-026-02a