CVE-2018-5461: Weak Encryption
Published Mar 6, 2018
·Updated
An Inadequate Encryption Strength issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An inadequate encryption strength vulnerability in the web interface has been identified, which may allow an attacker to obtain sensitive information through a successful man-in-the-middle attack.
Affected Software
134 affected components
Belden Hirschmann Rs20-0900mmm2tdau
Belden Hirschmann Rs20-0900nnm4tdau
Belden Hirschmann Rs20-0900vvm2tdau
Belden Hirschmann Rs20-1600l2l2sdau
Belden Hirschmann Rs20-1600l2m2sdau
Belden Hirschmann Rs20-1600l2s2sdau
Belden Hirschmann Rs20-1600l2t1sdau
Belden Hirschmann Rs20-1600m2m2sdau
Belden Hirschmann Rs20-1600m2t1sdau
Belden Hirschmann Rs20-1600s2m2sdau
Belden Hirschmann Rs20-1600s2s2sdau
Belden Hirschmann Rs20-1600s2t1sdau
Belden Hirschmann Rsr20
Belden Hirschmann Rsr30
Belden Hirschmann Rsb20-0800m2m2saab
Belden Hirschmann Rsb20-0800m2m2saabe
Belden Hirschmann Rsb20-0800m2m2taab
Belden Hirschmann Rsb20-0800m2m2taabe
Belden Hirschmann Rsb20-0800s2s2saab
Belden Hirschmann Rsb20-0800s2s2saabe
Belden Hirschmann Rsb20-0800s2s2taab
Belden Hirschmann Rsb20-0800s2s2taabe
Belden Hirschmann Rsb20-0800t1t1saab
Belden Hirschmann Rsb20-0800t1t1saabe
Belden Hirschmann Rsb20-0800t1t1taab
Belden Hirschmann Rsb20-0800t1t1taabe
Belden Hirschmann Rsb20-0900m2ttsaab
Belden Hirschmann Rsb20-0900m2ttsaabe
Belden Hirschmann Rsb20-0900m2tttaab
Belden Hirschmann Rsb20-0900m2tttaabe
Belden Hirschmann Rsb20-0900mmm2saab
Belden Hirschmann Rsb20-0900mmm2saabe
Belden Hirschmann Rsb20-0900mmm2taab
Belden Hirschmann Rsb20-0900mmm2taabe
Belden Hirschmann Rsb20-0900s2ttsaab
Belden Hirschmann Rsb20-0900s2ttsaabe
Belden Hirschmann Rsb20-0900s2tttaab
Belden Hirschmann Rsb20-0900s2tttaabe
Belden Hirschmann Rsb20-0900vvm2saab
Belden Hirschmann Rsb20-0900vvm2saabe
Belden Hirschmann Rsb20-0900vvm2taab
Belden Hirschmann Rsb20-0900vvm2taabe
Belden Hirschmann Rsb20-0900zzz6saab
Belden Hirschmann Rsb20-0900zzz6saabe
Belden Hirschmann Rsb20-0900zzz6taab
Belden Hirschmann Rsb20-0900zzz6taabe
Belden Hirschmann M1-8mm-sc
Belden Hirschmann M1-8sfp
Belden Hirschmann M1-8sm-sc
Belden Hirschmann M1-8tp-rj45
Belden Hirschmann Mach102-24tp-f
Belden Hirschmann Mach102-24tp-fr
Belden Hirschmann Mach102-8tp
Belden Hirschmann Mach102-8tp-f
Belden Hirschmann Mach102-8tp-fr
Belden Hirschmann Mach102-8tp-r
Belden Hirschmann Mach104-16tx-poep
Belden Hirschmann Mach104-16tx-poep-l3p
Belden Hirschmann Mach104-16tx-poep \+2x
Belden Hirschmann Mach104-16tx-poep \+2x-l3p
Belden Hirschmann Mach104-16tx-poep \+2x -e
Belden Hirschmann Mach104-16tx-poep \+2x -e-l3p
Belden Hirschmann Mach104-16tx-poep \+2x -r
Belden Hirschmann Mach104-16tx-poep \+2x -r-l3p
Belden Hirschmann Mach104-16tx-poep -e
Belden Hirschmann Mach104-16tx-poep -e-l3p
Belden Hirschmann Mach104-16tx-poep -r
Belden Hirschmann Mach104-16tx-poep -r-l3p
Belden Hirschmann Mach104-20tx-f
Belden Hirschmann Mach104-20tx-f-4poe
Belden Hirschmann Mach104-20tx-f-l3p
Belden Hirschmann Mach104-20tx-fr
Belden Hirschmann Mach104-20tx-fr-l3p
Belden Hirschmann Mach4002-24g\+3x-l2p
Belden Hirschmann Mach4002-24g\+3x-l3e
Belden Hirschmann Mach4002-24g\+3x-l3p
Belden Hirschmann Mach4002-24g-l2p
Belden Hirschmann Mach4002-24g-l3e
Belden Hirschmann Mach4002-24g-l3p
Belden Hirschmann Mach4002-48g\+3x-l2p
Belden Hirschmann Mach4002-48g\+3x-l3e
Belden Hirschmann Mach4002-48g\+3x-l3p
Belden Hirschmann Mach4002-48g-l2p
Belden Hirschmann Mach4002-48g-l3e
Belden Hirschmann Mach4002-48g-l3p
Belden Hirschmann Ms20-0800eccp
Belden Hirschmann Ms20-0800saae
Belden Hirschmann Ms20-0800saap
Belden Hirschmann Ms20-1600eccp
Belden Hirschmann Ms20-1600saae
Belden Hirschmann Ms20-1600saap
Belden Hirschmann Ms30-0802saae
Belden Hirschmann Ms30-0802saap
Belden Hirschmann Ms30-1602saae
Belden Hirschmann Octopus 16m
Belden Hirschmann Octopus 16m-8poe
Belden Hirschmann Octopus 16m-train
Belden Hirschmann Octopus 16m-train-bp
Belden Hirschmann Octopus 24m
Belden Hirschmann Octopus 24m-8 Poe
Belden Hirschmann Octopus 24m-train
Belden Hirschmann Octopus 24m-train-bp
Belden Hirschmann Octopus 5tx Eec
Belden Hirschmann Octopus 8m
Belden Hirschmann Octopus 8m-6poe
Belden Hirschmann Octopus 8m-8poe
Belden Hirschmann Octopus 8m-train
Belden Hirschmann Octopus 8m-train-bp
Belden Hirschmann Octopus 8tx-eec
Belden Hirschmann Octopus 8tx Poe-eec
Belden Hirschmann Octopus Os20-000900t5t5tafbhh
Belden Hirschmann Octopus Os20-000900t5t5tnebhh
Belden Hirschmann Octopus Os20-0010001m1mtrephh
Belden Hirschmann Octopus Os20-0010001s1strephh
Belden Hirschmann Octopus Os20-0010004m4mtrephh
Belden Hirschmann Octopus Os20-0010004s4strephh
Belden Hirschmann Octopus Os20-001000t5t5tafuhb
Belden Hirschmann Octopus Os20-001000t5t5tneuhb
Belden Hirschmann Octopus Os24-080900t5t5tffbhh
Belden Hirschmann Octopus Os24-080900t5t5tnebhh
Belden Hirschmann Octopus Os24-081000t5t5tffuhb
Belden Hirschmann Octopus Os24-081000t5t5tneuhb
Belden Hirschmann Octopus Os30
Belden Hirschmann Octopus Os30-0008021a1atrephh
Belden Hirschmann Octopus Os30-0008021b1btrephh
Belden Hirschmann Octopus Os30-0008024a4atrephh
Belden Hirschmann Octopus Os30-0008024b4btrephh
Belden Hirschmann Octopus Os32-080802o6o6tpephh
Belden Hirschmann Octopus Os32-080802t6t6tpephh
Belden Hirschmann Octopus Os32-081602o6o6tpephh
Belden Hirschmann Octopus Os32-081602t6t6tpephh
Belden Hirschmann Octopus Os34
Belden Hirschmann Octopus Os3x-xx16xxx
Belden Hirschmann Octopus Os3x-xx24xxx
Event History
Mar 6, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Data Sourced
via NVD·09:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-5461?
The severity of CVE-2018-5461 is classified as Medium due to the inadequate encryption strength in the affected devices.
2
How do I fix CVE-2018-5461?
To fix CVE-2018-5461, update the firmware of the affected Belden Hirschmann devices to the latest version provided by the vendor.
3
What devices are affected by CVE-2018-5461?
CVE-2018-5461 affects various Belden Hirschmann models including RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches.
4
What type of vulnerability is CVE-2018-5461?
CVE-2018-5461 is categorized as an Inadequate Encryption Strength issue.
5
Can CVE-2018-5461 be exploited remotely?
Yes, CVE-2018-5461 can potentially be exploited remotely through the web interface of the affected devices.