Description
An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. After an administrator downloads a configuration file, a copy of the configuration file, which includes hashes of user passwords, is saved to a location that is accessible without authentication by path traversal.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Belden Hirschmann GECKO 2.0.00 and prior | Belden Hirschmann GECKO 2.0.00 and prior | — |
Advisories 1
- ICSA-17-026-02A Belden Hirschmann GECKO (Update A) CISA ICS & IT advisories · Apr 18, 2017