High ICSA-18-065-01 5 CVEs

Hirschmann Automation and Control GmbH Classic Platform Switches

Published Mar 6, 2018 · Updated Mar 6, 2018

Vendor: Hirschmann Automation and Control GmbH, Belden Product: Classic Platform Switches MACH100 Product: Classic Platform Switches MACH1000 Product: Classic Platform Switches MACH4000 Product: Classic Platform Switches MS Product: Classic Platform Switches OCTOPUS Product: Classic Platform Switches RS Product: Classic Platform Switches RSB Product: Classic Platform Switches RSR

Summary

ATTENTION: Exploitable remotely/high skill level is needed to exploit.

Vulnerabilities 5

Unscored —

CVE-2018-5461

An Inadequate Encryption Strength issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, …

Mar 6, 2018
Unscored —

CVE-2018-5465

A Session Fixation issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS…

Mar 6, 2018
Unscored —

CVE-2018-5467

An Information Exposure Through Query Strings in GET Request issue was discovered in Belden Hirschmann RS, RSR, RSB, MA…

Mar 6, 2018
Unscored —

CVE-2018-5469

An Improper Restriction of Excessive Authentication Attempts issue was discovered in Belden Hirschmann RS, RSR, RSB, MA…

Mar 6, 2018
Unscored —

CVE-2018-5471

A Cleartext Transmission of Sensitive Information issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH…

Mar 6, 2018

Revision history

2018-03-06 #1
ICSA-18-065-01 Hirschmann Automation and Control GmbH Classic Platform Switches

References

ICS Advisory ICSA-18-065-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-065-01
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/