CVE-2018-5461 Weak cryptography in Hirschmann Automation and Control GmbH Classic Platform Switches

Medium 6.5 Published 6 Mar 2018 Updated 5 Aug 2024

Weak encryption in the web interface allows attackers to intercept sensitive information via man-in-the-middle attacks on Hirschmann industrial switches.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-5461?

CVE-2018-5461 is a medium-severity vulnerability in Hirschmann Automation and Control GmbH Classic Platform Switches, published on 6 Mar 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An Inadequate Encryption Strength issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An inadequate encryption strength vulnerability in the web interface has been identified, which may allow an attacker to obtain sensitive information through a successful man-in-the-middle attack.

Weakness: CWE-326

Which versions are affected by CVE-2018-5461?

It affects 134 products.

Products include Belden Hirschmann M1-8mm-Sc, Belden Hirschmann M1-8sfp, Belden Hirschmann M1-8sm-Sc, Belden Hirschmann M1-8tp-Rj45, Belden Hirschmann Mach102-24tp-F, Belden Hirschmann Mach102-24tp-Fr and 128 more.

How do I fix CVE-2018-5461?

No fix has been published for CVE-2018-5461 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-5461 being exploited?

There is no known exploitation of CVE-2018-5461 in the wild and no public exploit code.

Sources

Also known as GHSA-rv4v-xm8j-qccg.