CVE-2018-5467

Name: CVE-2018-5467
Creator: NVD / NIST
Published: 2018-03-06T21:29:00.347+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.32%

Last modified Jun 17, 2026

CVE-2018-5467 is a vulnerability of currently unknown severity. An Information Exposure Through Query Strings in GET Request issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate a legitimate user.. EPSS estimates a 1.32% chance of exploitation in the next 30 days.

Description

An Information Exposure Through Query Strings in GET Request issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate a legitimate user.

Metrics

EPSS Probability

1.32%

67.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Belden	Hirschmann Rs20-0900mmm2tdau	All versions
Belden	Hirschmann Rs20-0900nnm4tdau	All versions
Belden	Hirschmann Rs20-0900vvm2tdau	All versions
Belden	Hirschmann Rs20-1600l2l2sdau	All versions
Belden	Hirschmann Rs20-1600l2m2sdau	All versions
Belden	Hirschmann Rs20-1600l2s2sdau	All versions
Belden	Hirschmann Rs20-1600l2t1sdau	All versions
Belden	Hirschmann Rs20-1600m2m2sdau	All versions
Belden	Hirschmann Rs20-1600m2t1sdau	All versions
Belden	Hirschmann Rs20-1600s2m2sdau	All versions
Belden	Hirschmann Rs20-1600s2s2sdau	All versions
Belden	Hirschmann Rs20-1600s2t1sdau	All versions
Belden	Hirschmann Rsr20	All versions
Belden	Hirschmann Rsr30	All versions
Belden	Hirschmann Rsb20-0800m2m2saab	All versions
Belden	Hirschmann Rsb20-0800m2m2saabe	All versions
Belden	Hirschmann Rsb20-0800m2m2taab	All versions
Belden	Hirschmann Rsb20-0800m2m2taabe	All versions
Belden	Hirschmann Rsb20-0800s2s2saab	All versions
Belden	Hirschmann Rsb20-0800s2s2saabe	All versions
Belden	Hirschmann Rsb20-0800s2s2taab	All versions
Belden	Hirschmann Rsb20-0800s2s2taabe	All versions
Belden	Hirschmann Rsb20-0800t1t1saab	All versions
Belden	Hirschmann Rsb20-0800t1t1saabe	All versions
Belden	Hirschmann Rsb20-0800t1t1taab	All versions
Belden	Hirschmann Rsb20-0800t1t1taabe	All versions
Belden	Hirschmann Rsb20-0900m2ttsaab	All versions
Belden	Hirschmann Rsb20-0900m2ttsaabe	All versions
Belden	Hirschmann Rsb20-0900m2tttaab	All versions
Belden	Hirschmann Rsb20-0900m2tttaabe	All versions
Belden	Hirschmann Rsb20-0900mmm2saab	All versions
Belden	Hirschmann Rsb20-0900mmm2saabe	All versions
Belden	Hirschmann Rsb20-0900mmm2taab	All versions
Belden	Hirschmann Rsb20-0900mmm2taabe	All versions
Belden	Hirschmann Rsb20-0900s2ttsaab	All versions
Belden	Hirschmann Rsb20-0900s2ttsaabe	All versions
Belden	Hirschmann Rsb20-0900s2tttaab	All versions
Belden	Hirschmann Rsb20-0900s2tttaabe	All versions
Belden	Hirschmann Rsb20-0900vvm2saab	All versions
Belden	Hirschmann Rsb20-0900vvm2saabe	All versions
Belden	Hirschmann Rsb20-0900vvm2taab	All versions
Belden	Hirschmann Rsb20-0900vvm2taabe	All versions
Belden	Hirschmann Rsb20-0900zzz6saab	All versions
Belden	Hirschmann Rsb20-0900zzz6saabe	All versions
Belden	Hirschmann Rsb20-0900zzz6taab	All versions
Belden	Hirschmann Rsb20-0900zzz6taabe	All versions
Belden	Hirschmann M1-8mm-Sc	All versions
Belden	Hirschmann M1-8sfp	All versions
Belden	Hirschmann M1-8sm-Sc	All versions
Belden	Hirschmann M1-8tp-Rj45	All versions

Showing 50 of 134 affected configurations. See NVD for the full list.

References

http://www.securityfocus.com/bid/103340Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01Mitigation, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/103340Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01Mitigation, Third Party Advisory, US Government Resource

Timeline

Published: Mar 6, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-5467?

How severe is CVE-2018-5467?

Severity scoring for CVE-2018-5467 is pending analysis. The EPSS model estimates a 1.32% probability of exploitation in the next 30 days.

How do I fix CVE-2018-5467?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-5467?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST