CVE-2018-5467: Belden Hirschmann m1-8mm-Sc

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

An Information Exposure Through Query Strings in GET Request issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate a legitimate user.

Affected products

Belden Hirschmann m1-8mm-Sc: affected versions not specified
Belden Hirschmann m1-8sfp: affected versions not specified
Belden Hirschmann m1-8sm-Sc: affected versions not specified
Belden Hirschmann m1-8tp-RJ45: affected versions not specified
Belden Hirschmann MACH102-24tp-F: affected versions not specified
Belden Hirschmann MACH102-24tp-Fr: affected versions not specified
Belden Hirschmann MACH102-8tp: affected versions not specified
Belden Hirschmann MACH102-8tp-F: affected versions not specified
Belden Hirschmann MACH102-8tp-Fr: affected versions not specified
Belden Hirschmann MACH102-8tp-R: affected versions not specified
Belden Hirschmann MACH104-16tx-Poep: affected versions not specified
Belden Hirschmann MACH104-16tx-Poep-l3p: affected versions not specified
Belden Hirschmann MACH104-16tx-Poep +2x: affected versions not specified
Belden Hirschmann MACH104-16tx-Poep +2x-l3p: affected versions not specified
Belden Hirschmann MACH104-16tx-Poep +2x -E: affected versions not specified
Belden Hirschmann MACH104-16tx-Poep +2x -E-l3p: affected versions not specified
Belden Hirschmann MACH104-16tx-Poep +2x -R: affected versions not specified
Belden Hirschmann MACH104-16tx-Poep +2x -R-l3p: affected versions not specified
Belden Hirschmann MACH104-16tx-Poep -E: affected versions not specified
Belden Hirschmann MACH104-16tx-Poep -E-l3p: affected versions not specified
Belden Hirschmann MACH104-16tx-Poep -R: affected versions not specified
Belden Hirschmann MACH104-16tx-Poep -R-l3p: affected versions not specified
Belden Hirschmann MACH104-20tx-F: affected versions not specified
Belden Hirschmann MACH104-20tx-F-4poe: affected versions not specified
Belden Hirschmann MACH104-20tx-F-l3p: affected versions not specified
and 109 more

Published 2018-03-06. Last modified 2026-06-17.