Vulnerability Description
A Server-Side Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. The web server receives a request, but does not sufficiently verify that the request is being sent to the expected destination.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Belden Hirschmann | Gecko Lite Managed Switch Firmware | <= 2.0.00 |
| Belden Hirschmann | Gecko Lite Managed Switch | - |
Related Weaknesses (CWE)
References
- https://ics-cert.us-cert.gov/advisories/ICSA-17-026-02AMitigationThird Party AdvisoryUS Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-17-026-02AMitigationThird Party AdvisoryUS Government Resource
FAQ
What is CVE-2017-6036?
CVE-2017-6036 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A Server-Side Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. The web server receives a request, but does not sufficiently verif...
How severe is CVE-2017-6036?
CVE-2017-6036 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-6036?
Check the references section above for vendor advisories and patch information. Affected products include: Belden Hirschmann Gecko Lite Managed Switch Firmware, Belden Hirschmann Gecko Lite Managed Switch.