high8.8
CVE-2018-5465
A Session Fixation issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches.
Impact
A Session Fixation issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. A session fixation vulnerability in the web interface has been identified, which may allow an attacker to hijack web sessions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Belden | Hirschmann Rs20-0900mmm2tdau | All versions |
| Belden | Hirschmann Rs20-0900nnm4tdau | All versions |
| Belden | Hirschmann Rs20-0900vvm2tdau | All versions |
| Belden | Hirschmann Rs20-1600l2l2sdau | All versions |
| Belden | Hirschmann Rs20-1600l2m2sdau | All versions |
| Belden | Hirschmann Rs20-1600l2s2sdau | All versions |
| Belden | Hirschmann Rs20-1600l2t1sdau | All versions |
| Belden | Hirschmann Rs20-1600m2m2sdau | All versions |
| Belden | Hirschmann Rs20-1600m2t1sdau | All versions |
| Belden | Hirschmann Rs20-1600s2m2sdau | All versions |
| Belden | Hirschmann Rs20-1600s2s2sdau | All versions |
| Belden | Hirschmann Rs20-1600s2t1sdau | All versions |