medium5.9
CVE-2017-5163
An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions.
Impact
An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. After an administrator downloads a configuration file, a copy of the configuration file, which includes hashes of user passwords, is saved to a location that is accessible without authentication by path traversal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Belden Hirschmann | Gecko Lite Managed Switch Firmware | through 2.0.00 |