An Inadequate Encryption Strength issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. An inadequate encryption strength vulnerability in the web interface has been identified, which may allow an attacker to obtain sensitive information through a successful man-in-the-middle attack.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 3.0 | 6.5 | MEDIUM | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N |
| Primary | 2.0 | 5.8 | MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:N |
| Hyperlink | Source | Resource |
|---|---|---|
| http://www.securityfocus.com/bid/103340 | ics-cert@hq.dhs.gov | Third Party Advisory VDB Entry |
| https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01 | ics-cert@hq.dhs.gov | Mitigation Third Party Advisory US Government Resource |