Most recent entries from all

cnvd-2017-01671

EUVD-2026-73203

fkie_cve-2017-5163

An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. After an administrator downloads a configuration file, a copy of the configuration file, which includes hashes of user passwords, is saved to a location that is accessible without authentication by path traversal.

GHSA-m7jp-2chf-r9qj

gsd-2017-5163

ICSA-17-026-02A — Belden Hirschmann GECKO (Update A)

After an administrator downloads a configuration file, a copy of the configuration file, which includes hashes of user passwords, is saved to a location that is accessible without authentication.CVE-2017-5163 has been assigned to this vulnerability. A CVSS v3 base score of 5.9 has been assigned; the CVSS vector string is (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Web server receives a request, but does not sufficiently verify that the request is being sent to the expected destination.--------- Begin Update A Part 5 of 5 ------- Web application does not sufficiently verify that requests were provided by user who submitted request.CVE-2017-6036 has been assigned to this vulnerability. A CVSS v3 base score of 6.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N ). Non-sensitive information can be obtained anonymously.CVE-2017-6038 has been assigned to this vulnerability. A CVSS v3 base score of 7.1 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L).