CVE-2017-5163: Belden Hirschmann Gecko Lite Managed Switch Firmware

Medium severity, CVSS 5.9. EPSS: 1.9% chance of exploitation in the next 30 days.

An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. After an administrator downloads a configuration file, a copy of the configuration file, which includes hashes of user passwords, is saved to a location that is accessible without authentication by path traversal.

Affected products

• Belden Hirschmann Gecko Lite Managed Switch Firmware: up to and including 2.0.00

Published 2017-02-13. Last modified 2026-06-17.