CVE Vulnerabilities

CVE-2018-5461

Inadequate Encryption Strength

Published: Mar 06, 2018 | Modified: Oct 09, 2019
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS 2.x
5.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

An Inadequate Encryption Strength issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An inadequate encryption strength vulnerability in the web interface has been identified, which may allow an attacker to obtain sensitive information through a successful man-in-the-middle attack.

Weakness

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

Affected Software

Name Vendor Start Version End Version
Hirschmann_rs20-0900mmm2tdau Belden - (including) - (including)
Hirschmann_rs20-0900nnm4tdau Belden - (including) - (including)
Hirschmann_rs20-0900vvm2tdau Belden - (including) - (including)
Hirschmann_rs20-1600l2l2sdau Belden - (including) - (including)
Hirschmann_rs20-1600l2m2sdau Belden - (including) - (including)
Hirschmann_rs20-1600l2s2sdau Belden - (including) - (including)
Hirschmann_rs20-1600l2t1sdau Belden - (including) - (including)
Hirschmann_rs20-1600m2m2sdau Belden - (including) - (including)
Hirschmann_rs20-1600m2t1sdau Belden - (including) - (including)
Hirschmann_rs20-1600s2m2sdau Belden - (including) - (including)
Hirschmann_rs20-1600s2s2sdau Belden - (including) - (including)
Hirschmann_rs20-1600s2t1sdau Belden - (including) - (including)

Potential Mitigations

References