CVE-2018-5467: belden hirschmann_m1-8mm-sc
Vulnerability summary
CVE-2018-5467 is a medium (CVSS 6.5) vulnerability in belden hirschmann_m1-8mm-sc. EPSS estimates a 1.28% chance of exploitation in the next 30 days, higher than 69.6% of scored vulnerabilities.
Timeline
- 06-03-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An Information Exposure Through Query Strings in GET Request issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate a legitimate user.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.28%
Chance of exploitation in the next 30 days
Percentile
70%
Versus all other CVEs
30-day change
0.00 pp
From 1.28% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-598Use of HTTP Request With Sensitive Query StringThe web application uses an HTTP method to process a request, but the request includes sensitive information in the query string.
- CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Affected systems
Belden134 products
- hirschmann_m1-8mm-scna
- hirschmann_m1-8sfpna
- hirschmann_m1-8sm-scna
- hirschmann_m1-8tp-rj45na
- hirschmann_mach102-24tp-fna
1 vendor · 134 products
References
2 links- ics-cert.us-cert.gov/advisories/ICSA-18-065-01X Refsource MISCMitigationThird Party AdvisoryUS Government Resource