CVE-2018-5471 Information disclosure in Hirschmann Automation and Control GmbH Classic Platform Switches

Medium 5.9 Published 6 Mar 2018 Updated 5 Aug 2024

Attackers can intercept sensitive information via man-in-the-middle attacks due to cleartext transmission in the web interface of Hirschmann switches.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-5471?

CVE-2018-5471 is a medium-severity vulnerability in Hirschmann Automation and Control GmbH Classic Platform Switches, published on 6 Mar 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A Cleartext Transmission of Sensitive Information issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. A cleartext transmission of sensitive information vulnerability in the web interface has been identified, which may allow an attacker to obtain sensitive information through a successful man-in-the-middle attack.

Weakness: CWE-319

Which versions are affected by CVE-2018-5471?

It affects 134 products.

Products include Belden Hirschmann M1-8mm-Sc, Belden Hirschmann M1-8sfp, Belden Hirschmann M1-8sm-Sc, Belden Hirschmann M1-8tp-Rj45, Belden Hirschmann Mach102-24tp-F, Belden Hirschmann Mach102-24tp-Fr and 128 more.

How do I fix CVE-2018-5471?

No fix has been published for CVE-2018-5471 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-5471 being exploited?

There is no known exploitation of CVE-2018-5471 in the wild and no public exploit code.

Sources

Also known as GHSA-v22v-4gfh-3m25.