CVE-2018-5467 Information disclosure in Hirschmann Automation and Control GmbH Classic Platform Switches

Medium 6.5 Published 6 Mar 2018 Updated 5 Aug 2024

Attackers can exploit query string exposure in the web interface to impersonate legitimate users on Hirschmann industrial switches.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-5467?

CVE-2018-5467 is a medium-severity vulnerability in Hirschmann Automation and Control GmbH Classic Platform Switches, published on 6 Mar 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An Information Exposure Through Query Strings in GET Request issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate a legitimate user.

Weakness: CWE-200, CWE-598

Which versions are affected by CVE-2018-5467?

It affects 134 products.

Products include Belden Hirschmann M1-8mm-Sc, Belden Hirschmann M1-8sfp, Belden Hirschmann M1-8sm-Sc, Belden Hirschmann M1-8tp-Rj45, Belden Hirschmann Mach102-24tp-F, Belden Hirschmann Mach102-24tp-Fr and 128 more.

How do I fix CVE-2018-5467?

No fix has been published for CVE-2018-5467 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-5467 being exploited?

There is no known exploitation of CVE-2018-5467 in the wild and no public exploit code.

Sources

Also known as GHSA-8929-9vrr-cvf4.