CVE-2017-6040 Information disclosure in Belden Hirschmann GECKO
An attacker can anonymously obtain non-sensitive information from the Belden Hirschmann GECKO Lite Managed switch.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-6040?
CVE-2017-6040 is a medium-severity vulnerability in Belden Hirschmann GECKO, published on 30 Jun 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An Information Exposure issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. Non-sensitive information can be obtained anonymously.
Weakness: CWE-200
Which versions are affected by CVE-2017-6040?
It affects 1 product.
Products include Belden Hirschmann Gecko Lite Managed Switch Firmware.
How do I fix CVE-2017-6040?
No fix has been published for CVE-2017-6040 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-6040 being exploited?
There is no known exploitation of CVE-2017-6040 in the wild and no public exploit code.
Other vulnerabilities in Belden Hirschmann GECKO
Sources
Also known as GHSA-9683-974q-2vmg.