medium
6.5
CWE
200 598
Advisory Published
Updated

CVE-2018-5467: Infoleak

First published: Tue Mar 06 2018(Updated: )

An Information Exposure Through Query Strings in GET Request issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate a legitimate user.

Credit: ics-cert@hq.dhs.gov

Affected SoftwareAffected VersionHow to fix
Belden Hirschmann RS20-0900MMM2TDAU
Belden Hirschmann RS20-0900NNM4TDAU
Belden Hirschmann RS20-0900MMM2TDAU
Belden Hirschmann RS20-1600L2L2SDAU
Belden Hirschmann RS20-1600L2M2SDAU
Belden Hirschmann RS20-1600L2S2SDAU
Belden Hirschmann RS20-1600L2T1SDAU
Belden Hirschmann RS20-1600M2M2SDAU
Belden Hirschmann RS20-1600M2T1SDAU
Belden Hirschmann RS20-1600S2M2SDAU
Belden Hirschmann RS20-1600S2S2SDAU
Belden Hirschmann RS20-1600S2T1SDAU
Belden Hirschmann RSR20
Belden Hirschmann RSR30
Belden Hirschmann RSB20-0800M2M2SAABE
Belden Hirschmann RSB20-0800M2M2SAABE
Belden Hirschmann RSB20-0800M2M2TAAB
Belden Hirschmann RSB20-0800M2M2TAAB
Belden Hirschmann RSB20-0800S2S2SAAB
Belden Hirschmann RSB20-0800 S2S2 SAABE
Belden Hirschmann RSB20-0800-S2-S2TAABE
Belden Hirschmann RSB20-0800S2S2TAAB
Belden Hirschmann RSB20-0800T1T1TAAB
Belden Hirschmann RSB20-0800-T1T1SAAB
Belden Hirschmann RSB20-0800T1T1TAAB
Belden Hirschmann rsb20-0800t1t1taab
Belden Hirschmann RSB20-0900M2TTSAABE
Belden Hirschmann RSB20
Belden Hirschmann RSB20-0900M2TTTAABE
Belden Hirschmann RSB20
Belden Hirschmann RSB20-0900MMM2SAAB
Belden Hirschmann RSB20-0900MMM2SAABE
Belden Hirschmann RSB20-0900MMM2TAABE
Belden Hirschmann RSB20-0900MMM2TAABE
Belden Hirschmann RSB20-0900S2TTSAAB
Belden Hirschmann RSB20-0900S2TTSAABE
Belden Hirschmann RSB20
Belden Hirschmann RSB20-0900-S2TTTAABE
Belden Hirschmann rsb20-0900s2ttsaab
Belden Hirschmann RSB20-0900VVM2SAABE
Belden Hirschmann RSB20-0900VVM2TAAB
Belden Hirschmann RSB20-0900VVM2TAAB
Belden Hirschmann RSB20-0900-ZZZ6-SAAB
Belden Hirschmann RSB20 Series
Belden Hirschmann RSB20-0900 ZZZ6 TAAB
Belden Hirschmann RSB20-0900-ZZZ6TAABE
Belden Hirschmann M1-8SM-SC
Belden Hirschmann m1-8sfp
Belden Hirschmann M1-8SM-SC
Belden Hirschmann m1-8tp-rj45
Belden Hirschmann mach102-24tp-f
Belden Hirschmann mach102-24tp-f
Belden Hirschmann mach102-8tp
Belden Hirschmann MACH102-8TP-F
Belden Hirschmann mach102-8tp-fr
Belden Hirschmann MACH102-8TP-R
Belden Hirschmann Mach104-16TX-POEP +2X -E-L3P
Belden Hirschmann mach104-16tx-poep-l3p
Belden Hirschmann mach104-16tx-poep +2x
Belden Hirschmann mach104-16tx-poep +2x-l3p
Belden Hirschmann mach104-16tx-poep
Belden Hirschmann Mach104-16TX-POEP +2X -E-L3P
Belden Hirschmann MACH104-16TX-POEP
Belden Hirschmann mach104-16tx-poep
Belden Hirschmann mach104-16tx-poep
Belden Hirschmann mach104-16tx-poep
Belden Hirschmann MACH104-16TX-POEP-R
Belden Hirschmann MACH104-16TX-POEP-R
Belden Hirschmann MACH104-20TX-F-L3P
Belden Hirschmann MACH104-20TX-F-4POE
Belden Hirschmann MACH104-20TX-F-L3P
Belden Hirschmann MACH104-20TX-FR
Belden Hirschmann MACH104-20TX-FR-L3P
Belden Hirschmann mach4002-24g+3x-l2p
Belden Hirschmann mach4002-24g+3x-l3e
Belden Hirschmann mach4002-24g+3x-l3p
Belden Hirschmann MACH4002-24G+3X-L2P
Belden Hirschmann mach4002-24g+3x-l3e
Belden Hirschmann mach4002-24g+3x-l3p
Belden Hirschmann Mach4002-48G+3X-L2P
Belden Hirschmann mach4002-48g+3x-l3e
Belden Hirschmann mach4002-48g+3x-l3p
Belden Hirschmann Mach4002-48G+3X-L2P
Belden Hirschmann MACH4002-48G+3X-L3E
Belden Hirschmann mach4002-48g+3x-l3p
Belden Hirschmann Mice Switch Power
Belden Hirschmann MS20-0800SAAE
Belden Hirschmann ms20-0800saap
Belden Hirschmann Mice Switch Power
Belden Hirschmann Mice Switch Power
Belden Hirschmann MS20-1600SAAP
Belden Hirschmann MSP30
Belden Hirschmann MSP30
Belden Hirschmann MS30-1602SAAE
Belden Hirschmann Octopus
Belden Hirschmann Octopus
Belden Hirschmann OCTOPUS
Belden Hirschmann OCTOPUS 16m-train-bp
Belden Hirschmann Octopus
Belden Hirschmann OCTOPUS 24m-8 poe
Belden Hirschmann OCTOPUS
Belden Hirschmann OCTOPUS 24m-train-bp
Belden Hirschmann Octopus
Belden Hirschmann Octopus
Belden Hirschmann Octopus
Belden Hirschmann Octopus
Belden Hirschmann OCTOPUS 8m-train
Belden Hirschmann OCTOPUS 8m-train-bp
Belden Hirschmann Octopus
Belden Hirschmann OCTOPUS 8tx poe-eec
Belden Hirschmann OCTOPUS
Belden Hirschmann OCTOPUS os20-000900t5t5tafbhh
Belden Hirschmann OCTOPUS os20-0010001m1mtrephh
Belden Hirschmann OCTOPUS os20-0010001s1strephh
Belden Hirschmann OCTOPUS os20-0010004m4mtrephh
Belden Hirschmann OCTOPUS
Belden Hirschmann OCTOPUS
Belden Hirschmann OCTOPUS
Belden Hirschmann OCTOPUS os24-080900t5t5tffbhh
Belden Hirschmann OCTOPUS os24-080900t5t5tffbhh
Belden Hirschmann OCTOPUS os24-081000t5t5tffuhb
Belden Hirschmann OCTOPUS os24-081000t5t5tffuhb
Belden Hirschmann Octopus
Belden Hirschmann OCTOPUS os30
Belden Hirschmann OCTOPUS
Belden Hirschmann OCTOPUS
Belden Hirschmann OCTOPUS
Belden Hirschmann OCTOPUS os32-080802o6o6tpephh
Belden Hirschmann OCTOPUS
Belden Hirschmann OCTOPUS os32-081602o6o6tpephh
Belden Hirschmann OCTOPUS os32-081602t6t6tpephh
Belden Hirschmann Octopus
Belden Hirschmann OCTOPUS
Belden Hirschmann OCTOPUS

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2018-5467?

    CVE-2018-5467 has a medium severity rating that indicates potential information exposure risks.

  • How do I fix CVE-2018-5467?

    To fix CVE-2018-5467, update to the latest firmware provided by Belden for affected devices.

  • Which devices are affected by CVE-2018-5467?

    CVE-2018-5467 affects multiple Belden Hirschmann switches, including RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS models.

  • What type of vulnerability is CVE-2018-5467?

    CVE-2018-5467 is classified as an Information Exposure Through Query Strings vulnerability in the web interface.

  • Can CVE-2018-5467 lead to data breaches?

    Yes, CVE-2018-5467 can potentially lead to unauthorized access to sensitive information transmitted through query strings.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203