Details of VAR-201803-2086

ID

VAR-201803-2086

CVE

CVE-2018-5465

TITLE

plural Belden Hirschmann Session fixation vulnerability in products

Trust: 0.8

sources: JVNDB: JVNDB-2018-002738

DESCRIPTION

A Session Fixation issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. A session fixation vulnerability in the web interface has been identified, which may allow an attacker to hijack web sessions. plural Belden Hirschmann The product contains a session fixation vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. BeldenHirschmannRS and other are the switch products of the Belden company in the United States. Multiple Belden Products are prone to the following security vulnerabilities. 1. An information-disclosure vulnerability 3. A security-bypass vulnerability 4. A security weakness vulnerability 5. An authentication-bypass vulnerability An attacker can exploit this issue to bypass the authentication, obtain sensitive information and gain unauthorized access using brute-force attacks. Successfully exploiting this issue may lead to further attacks

Trust: 2.61

sources: NVD: CVE-2018-5465 // JVNDB: JVNDB-2018-002738 // CNVD: CNVD-2018-04784 // BID: 103340 // IVD: e2e48a10-39ab-11e9-b994-000c29342cb1

IOT TAXONOMY

category:	['ICS', 'Network device']	sub_category:	-	Trust: 0.6
category:	['ICS']	sub_category:	-	Trust: 0.2

sources: IVD: e2e48a10-39ab-11e9-b994-000c29342cb1 // CNVD: CNVD-2018-04784

AFFECTED PRODUCTS

vendor:	belden	model:	hirschmann mach104-16tx-poep -r	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann mach104-16tx-poep \+2x -e	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann mach104-16tx-poep \+2x -r-l3p	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann mach104-16tx-poep -e	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann mach104-16tx-poep -e-l3p	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann mach104-16tx-poep -r-l3p	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann mach104-16tx-poep \+2x -r	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann mach104-20tx-f	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann mach104-20tx-fr-l3p	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann mach104-16tx-poep \+2x -e-l3p	scope:	eq	version:	-	Trust: 1.6
vendor:	belden	model:	hirschmann rs	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann rsr	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann rsb	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann mach100	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann mach1000	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann mach4000	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann ms	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann octopus	scope:	-	version:	-	Trust: 1.4
vendor:	belden	model:	hirschmann mach4002-24g-l2p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os24-080900t5t5tnebhh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-16tx-poep-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os30-0008024b4btrephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-20tx-f-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 8m-train-bp	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-1600m2m2sdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 8m-8poe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-0010001s1strephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-001000t5t5tafuhb	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800t1t1taabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900s2ttsaabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 16m-train	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-1600l2t1sdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann m1-8tp-rj45	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900mmm2saab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os32-080802t6t6tpephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 24m	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-48g-l3e	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-0010001m1mtrephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900mmm2taab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800m2m2taabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 16m-train-bp	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os30-0008021a1atrephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach102-8tp-f	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800t1t1saab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os30-0008024a4atrephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach102-24tp-f	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900zzz6taab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900vvm2taabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 8m	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach102-8tp-fr	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms20-0800eccp	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900mmm2saabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900s2tttaab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os32-081602o6o6tpephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800s2s2saab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 24m-8 poe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os30	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800t1t1taab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 8m-train	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 5tx eec	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-0900nnm4tdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-24g\+3x-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsr20	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-20tx-fr	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms20-0800saae	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800t1t1saabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900vvm2saabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-24g\+3x-l2p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900s2tttaabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-1600l2m2sdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os24-081000t5t5tffuhb	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-000900t5t5tnebhh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 24m-train-bp	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os24-081000t5t5tneuhb	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900zzz6taabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os30-0008021b1btrephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsr30	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-48g\+3x-l3e	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 8tx-eec	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800m2m2saab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os32-081602t6t6tpephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 8tx poe-eec	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-48g\+3x-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900vvm2taab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900s2ttsaab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 16m-8poe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os3x-xx24xxx	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach102-8tp-r	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-1600l2l2sdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-48g-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900m2ttsaabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800m2m2taab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann m1-8sfp	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach102-8tp	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-24g-l3e	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-24g-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms20-1600eccp	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-0010004m4mtrephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800s2s2taabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-16tx-poep	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-20tx-f-4poe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-1600s2s2sdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900zzz6saabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900vvm2saab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 24m-train	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900m2tttaabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 8m-6poe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann m1-8mm-sc	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-0900vvm2tdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-48g-l2p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms20-1600saae	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann m1-8sm-sc	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-1600l2s2sdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms30-0802saae	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-0010004s4strephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms20-1600saap	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os3x-xx16xxx	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-1600m2t1sdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-48g\+3x-l2p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-001000t5t5tneuhb	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800s2s2taab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900m2tttaab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-16tx-poep \+2x-l3p	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms30-0802saap	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800m2m2saabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900m2ttsaab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach4002-24g\+3x-l3e	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900mmm2taabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus 16m	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms30-1602saae	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-1600s2t1sdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0900zzz6saab	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach102-24tp-fr	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os24-080900t5t5tffbhh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os20-000900t5t5tafbhh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann mach104-16tx-poep \+2x	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os34	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rsb20-0800s2s2saabe	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann octopus os32-080802o6o6tpephh	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann ms20-0800saap	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-1600s2m2sdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	hirschmann rs20-0900mmm2tdau	scope:	eq	version:	-	Trust: 1.0
vendor:	belden	model:	rsr	scope:	eq	version:	0	Trust: 0.3
vendor:	belden	model:	rsb	scope:	eq	version:	0	Trust: 0.3
vendor:	belden	model:	rs	scope:	eq	version:	0	Trust: 0.3
vendor:	belden	model:	octopus	scope:	eq	version:	0	Trust: 0.3
vendor:	belden	model:	ms	scope:	eq	version:	0	Trust: 0.3
vendor:	belden	model:	mach4000	scope:	eq	version:	0	Trust: 0.3
vendor:	belden	model:	mach1000	scope:	eq	version:	0	Trust: 0.3
vendor:	belden	model:	mach100	scope:	eq	version:	0	Trust: 0.3
vendor:	hirschmann rs20 0900mmm2tdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 0900nnm4tdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 0900vvm2tdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600l2l2sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600l2m2sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600l2s2sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600l2t1sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600m2m2sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600m2t1sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600s2m2sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600s2s2sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rs20 1600s2t1sdau	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsr20	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsr30	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800m2m2saab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800m2m2saabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800m2m2taab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800m2m2taabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800s2s2saab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800s2s2saabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800s2s2taab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800s2s2taabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800t1t1saab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800t1t1saabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800t1t1taab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0800t1t1taabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900m2ttsaab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900m2ttsaabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900m2tttaab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900m2tttaabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900mmm2saab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900mmm2saabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900mmm2taab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900mmm2taabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900s2ttsaab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900s2ttsaabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900s2tttaab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900s2tttaabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900vvm2saab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900vvm2saabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900vvm2taab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900vvm2taabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900zzz6saab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900zzz6saabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900zzz6taab	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann rsb20 0900zzz6taabe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann m1 8mm sc	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann m1 8sfp	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann m1 8sm sc	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann m1 8tp rj45	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach102 24tp f	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach102 24tp fr	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach102 8tp	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach102 8tp f	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach102 8tp fr	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach102 8tp r	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep 2x	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep 2x l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep 2x e	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep 2x e l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep 2x r	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep 2x r l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep e	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep e l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep r	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 16tx poep r l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 20tx f	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 20tx f 4poe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 20tx f l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 20tx fr	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach104 20tx fr l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 24g 3x l2p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 24g 3x l3e	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 24g 3x l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 24g l2p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 24g l3e	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 24g l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 48g 3x l2p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 48g 3x l3e	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 48g 3x l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 48g l2p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 48g l3e	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann mach4002 48g l3p	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms20 0800eccp	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms20 0800saae	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms20 0800saap	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms20 1600eccp	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms20 1600saae	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms20 1600saap	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms30 0802saae	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms30 0802saap	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann ms30 1602saae	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 16m	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 16m 8poe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 16m train	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 16m train bp	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 24m	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 24m 8 poe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 24m train	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 24m train bp	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 5tx eec	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 8m	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 8m 6poe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 8m 8poe	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 8m train	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 8m train bp	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 8tx eec	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus 8tx poe eec	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 000900t5t5tafbhh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 000900t5t5tnebhh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 0010001m1mtrephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 0010001s1strephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 0010004m4mtrephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 0010004s4strephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 001000t5t5tafuhb	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os20 001000t5t5tneuhb	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os24 080900t5t5tffbhh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os24 080900t5t5tnebhh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os24 081000t5t5tffuhb	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os24 081000t5t5tneuhb	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os30	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os30 0008021a1atrephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os30 0008021b1btrephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os30 0008024a4atrephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os30 0008024b4btrephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os32 080802o6o6tpephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os32 080802t6t6tpephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os32 081602o6o6tpephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os32 081602t6t6tpephh	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os34	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os3x xx16xxx	model:	-	scope:	eq	version:	-	Trust: 0.2
vendor:	hirschmann octopus os3x xx24xxx	model:	-	scope:	eq	version:	-	Trust: 0.2

sources: IVD: e2e48a10-39ab-11e9-b994-000c29342cb1 // CNVD: CNVD-2018-04784 // BID: 103340 // JVNDB: JVNDB-2018-002738 // CNNVD: CNNVD-201803-139 // NVD: CVE-2018-5465

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2018-5465
value:	HIGH
Trust: 1.0
NVD:	CVE-2018-5465
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2018-04784
value:	HIGH
Trust: 0.6
CNNVD:	CNNVD-201803-139
value:	HIGH
Trust: 0.6
IVD:	e2e48a10-39ab-11e9-b994-000c29342cb1
value:	HIGH
Trust: 0.2

nvd@nist.gov:	CVE-2018-5465
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2018-04784
severity:	HIGH
baseScore:	7.6
vectorString:	AV:N/AC:H/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	4.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	e2e48a10-39ab-11e9-b994-000c29342cb1
severity:	HIGH
baseScore:	7.6
vectorString:	AV:N/AC:H/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	4.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2

nvd@nist.gov:	CVE-2018-5465
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.0
Trust: 1.8

sources: IVD: e2e48a10-39ab-11e9-b994-000c29342cb1 // CNVD: CNVD-2018-04784 // JVNDB: JVNDB-2018-002738 // CNNVD: CNNVD-201803-139 // NVD: CVE-2018-5465

PROBLEMTYPE DATA

problemtype:

CWE-384

Trust: 1.8

sources: JVNDB: JVNDB-2018-002738 // NVD: CVE-2018-5465

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201803-139

TYPE

authorization issue

Trust: 0.6

sources: CNNVD: CNNVD-201803-139

CONFIGURATIONS

sources: JVNDB: JVNDB-2018-002738

PATCH

title:

Top Page

url:

http://www.hirschmann.com/

Trust: 0.8

sources: JVNDB: JVNDB-2018-002738

EXTERNAL IDS

db:	NVD	id:	CVE-2018-5465	Trust: 3.5
db:	ICS CERT	id:	ICSA-18-065-01	Trust: 3.3
db:	BID	id:	103340	Trust: 1.9
db:	CNVD	id:	CNVD-2018-04784	Trust: 0.8
db:	CNNVD	id:	CNNVD-201803-139	Trust: 0.8
db:	JVNDB	id:	JVNDB-2018-002738	Trust: 0.8
db:	IVD	id:	E2E48A10-39AB-11E9-B994-000C29342CB1	Trust: 0.2

sources: IVD: e2e48a10-39ab-11e9-b994-000c29342cb1 // CNVD: CNVD-2018-04784 // BID: 103340 // JVNDB: JVNDB-2018-002738 // CNNVD: CNNVD-201803-139 // NVD: CVE-2018-5465

REFERENCES

url:	https://ics-cert.us-cert.gov/advisories/icsa-18-065-01	Trust: 3.3
url:	http://www.securityfocus.com/bid/103340	Trust: 1.6
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-5465	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2018-5465	Trust: 0.8
url:	https://www.belden.com/	Trust: 0.3

sources: CNVD: CNVD-2018-04784 // BID: 103340 // JVNDB: JVNDB-2018-002738 // CNNVD: CNNVD-201803-139 // NVD: CVE-2018-5465

CREDITS

Ilya Karpov, Evgeniy Druzhinin, Mikhail Tsvetkov, and Damir Zainullin of Positive Technologies.

Trust: 0.3

sources: BID: 103340

SOURCES

db:	IVD	id:	e2e48a10-39ab-11e9-b994-000c29342cb1
db:	CNVD	id:	CNVD-2018-04784
db:	BID	id:	103340
db:	JVNDB	id:	JVNDB-2018-002738
db:	CNNVD	id:	CNNVD-201803-139
db:	NVD	id:	CVE-2018-5465

LAST UPDATE DATE

2024-11-23T22:26:26.057000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2018-04784	date:	2018-03-09T00:00:00
db:	BID	id:	103340	date:	2018-03-06T00:00:00
db:	JVNDB	id:	JVNDB-2018-002738	date:	2018-04-26T00:00:00
db:	CNNVD	id:	CNNVD-201803-139	date:	2019-10-17T00:00:00
db:	NVD	id:	CVE-2018-5465	date:	2024-11-21T04:08:51.183

SOURCES RELEASE DATE

db:	IVD	id:	e2e48a10-39ab-11e9-b994-000c29342cb1	date:	2018-03-09T00:00:00
db:	CNVD	id:	CNVD-2018-04784	date:	2018-03-09T00:00:00
db:	BID	id:	103340	date:	2018-03-06T00:00:00
db:	JVNDB	id:	JVNDB-2018-002738	date:	2018-04-26T00:00:00
db:	CNNVD	id:	CNNVD-201803-139	date:	2018-03-07T00:00:00
db:	NVD	id:	CVE-2018-5465	date:	2018-03-06T21:29:00.300