{"id":"CVE-2018-5465","aliases":["EUVD-2018-17235","GHSA-9xwx-w5gp-5r6x"],"status":"published","title":"A Session Fixation issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000,...","description":"A Session Fixation issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. A session fixation vulnerability in the web interface has been identified, which may allow an attacker to hijack web sessions.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01733,"percentile":0.7777,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-384"],"published":"2018-03-06T21:00:00Z","modified":"2026-06-17T02:00:21Z","products":[{"vendor":"belden","product":"hirschmann_m1-8mm-sc"},{"vendor":"belden","product":"hirschmann_m1-8sfp"},{"vendor":"belden","product":"hirschmann_m1-8sm-sc"},{"vendor":"belden","product":"hirschmann_m1-8tp-rj45"},{"vendor":"belden","product":"hirschmann_mach102-24tp-f"},{"vendor":"belden","product":"hirschmann_mach102-24tp-fr"},{"vendor":"belden","product":"hirschmann_mach102-8tp"},{"vendor":"belden","product":"hirschmann_mach102-8tp-f"},{"vendor":"belden","product":"hirschmann_mach102-8tp-fr"},{"vendor":"belden","product":"hirschmann_mach102-8tp-r"},{"vendor":"belden","product":"hirschmann_mach104-16tx-poep"},{"vendor":"belden","product":"hirschmann_mach104-16tx-poep-l3p"},{"vendor":"belden","product":"hirschmann_mach104-16tx-poep_-e"},{"vendor":"belden","product":"hirschmann_mach104-16tx-poep_-e-l3p"},{"vendor":"belden","product":"hirschmann_mach104-16tx-poep_-r"},{"vendor":"belden","product":"hirschmann_mach104-16tx-poep_-r-l3p"},{"vendor":"belden","product":"hirschmann_mach104-16tx-poep_\\+2x"},{"vendor":"belden","product":"hirschmann_mach104-16tx-poep_\\+2x-l3p"},{"vendor":"belden","product":"hirschmann_mach104-16tx-poep_\\+2x_-e"},{"vendor":"belden","product":"hirschmann_mach104-16tx-poep_\\+2x_-e-l3p"},{"vendor":"belden","product":"hirschmann_mach104-16tx-poep_\\+2x_-r"},{"vendor":"belden","product":"hirschmann_mach104-16tx-poep_\\+2x_-r-l3p"},{"vendor":"belden","product":"hirschmann_mach104-20tx-f"},{"vendor":"belden","product":"hirschmann_mach104-20tx-f-4poe"},{"vendor":"belden","product":"hirschmann_mach104-20tx-f-l3p"},{"vendor":"belden","product":"hirschmann_mach104-20tx-fr"},{"vendor":"belden","product":"hirschmann_mach104-20tx-fr-l3p"},{"vendor":"belden","product":"hirschmann_mach4002-24g-l2p"},{"vendor":"belden","product":"hirschmann_mach4002-24g-l3e"},{"vendor":"belden","product":"hirschmann_mach4002-24g-l3p"},{"vendor":"belden","product":"hirschmann_mach4002-24g\\+3x-l2p"},{"vendor":"belden","product":"hirschmann_mach4002-24g\\+3x-l3e"},{"vendor":"belden","product":"hirschmann_mach4002-24g\\+3x-l3p"},{"vendor":"belden","product":"hirschmann_mach4002-48g-l2p"},{"vendor":"belden","product":"hirschmann_mach4002-48g-l3e"},{"vendor":"belden","product":"hirschmann_mach4002-48g-l3p"},{"vendor":"belden","product":"hirschmann_mach4002-48g\\+3x-l2p"},{"vendor":"belden","product":"hirschmann_mach4002-48g\\+3x-l3e"},{"vendor":"belden","product":"hirschmann_mach4002-48g\\+3x-l3p"},{"vendor":"belden","product":"hirschmann_ms20-0800eccp"},{"vendor":"belden","product":"hirschmann_ms20-0800saae"},{"vendor":"belden","product":"hirschmann_ms20-0800saap"},{"vendor":"belden","product":"hirschmann_ms20-1600eccp"},{"vendor":"belden","product":"hirschmann_ms20-1600saae"},{"vendor":"belden","product":"hirschmann_ms20-1600saap"},{"vendor":"belden","product":"hirschmann_ms30-0802saae"},{"vendor":"belden","product":"hirschmann_ms30-0802saap"},{"vendor":"belden","product":"hirschmann_ms30-1602saae"},{"vendor":"belden","product":"hirschmann_octopus_16m"},{"vendor":"belden","product":"hirschmann_octopus_16m-8poe"},{"vendor":"belden","product":"hirschmann_octopus_16m-train"},{"vendor":"belden","product":"hirschmann_octopus_16m-train-bp"},{"vendor":"belden","product":"hirschmann_octopus_24m"},{"vendor":"belden","product":"hirschmann_octopus_24m-8_poe"},{"vendor":"belden","product":"hirschmann_octopus_24m-train"},{"vendor":"belden","product":"hirschmann_octopus_24m-train-bp"},{"vendor":"belden","product":"hirschmann_octopus_5tx_eec"},{"vendor":"belden","product":"hirschmann_octopus_8m"},{"vendor":"belden","product":"hirschmann_octopus_8m-6poe"},{"vendor":"belden","product":"hirschmann_octopus_8m-8poe"},{"vendor":"belden","product":"hirschmann_octopus_8m-train"},{"vendor":"belden","product":"hirschmann_octopus_8m-train-bp"},{"vendor":"belden","product":"hirschmann_octopus_8tx-eec"},{"vendor":"belden","product":"hirschmann_octopus_8tx_poe-eec"},{"vendor":"belden","product":"hirschmann_octopus_os20-000900t5t5tafbhh"},{"vendor":"belden","product":"hirschmann_octopus_os20-000900t5t5tnebhh"},{"vendor":"belden","product":"hirschmann_octopus_os20-0010001m1mtrephh"},{"vendor":"belden","product":"hirschmann_octopus_os20-0010001s1strephh"},{"vendor":"belden","product":"hirschmann_octopus_os20-0010004m4mtrephh"},{"vendor":"belden","product":"hirschmann_octopus_os20-0010004s4strephh"},{"vendor":"belden","product":"hirschmann_octopus_os20-001000t5t5tafuhb"},{"vendor":"belden","product":"hirschmann_octopus_os20-001000t5t5tneuhb"},{"vendor":"belden","product":"hirschmann_octopus_os24-080900t5t5tffbhh"},{"vendor":"belden","product":"hirschmann_octopus_os24-080900t5t5tnebhh"},{"vendor":"belden","product":"hirschmann_octopus_os24-081000t5t5tffuhb"},{"vendor":"belden","product":"hirschmann_octopus_os24-081000t5t5tneuhb"},{"vendor":"belden","product":"hirschmann_octopus_os30"},{"vendor":"belden","product":"hirschmann_octopus_os30-0008021a1atrephh"},{"vendor":"belden","product":"hirschmann_octopus_os30-0008021b1btrephh"},{"vendor":"belden","product":"hirschmann_octopus_os30-0008024a4atrephh"},{"vendor":"belden","product":"hirschmann_octopus_os30-0008024b4btrephh"},{"vendor":"belden","product":"hirschmann_octopus_os32-080802o6o6tpephh"},{"vendor":"belden","product":"hirschmann_octopus_os32-080802t6t6tpephh"},{"vendor":"belden","product":"hirschmann_octopus_os32-081602o6o6tpephh"},{"vendor":"belden","product":"hirschmann_octopus_os32-081602t6t6tpephh"},{"vendor":"belden","product":"hirschmann_octopus_os34"},{"vendor":"belden","product":"hirschmann_octopus_os3x-xx16xxx"},{"vendor":"belden","product":"hirschmann_octopus_os3x-xx24xxx"},{"vendor":"belden","product":"hirschmann_rs20-0900mmm2tdau"},{"vendor":"belden","product":"hirschmann_rs20-0900nnm4tdau"},{"vendor":"belden","product":"hirschmann_rs20-0900vvm2tdau"},{"vendor":"belden","product":"hirschmann_rs20-1600l2l2sdau"},{"vendor":"belden","product":"hirschmann_rs20-1600l2m2sdau"},{"vendor":"belden","product":"hirschmann_rs20-1600l2s2sdau"},{"vendor":"belden","product":"hirschmann_rs20-1600l2t1sdau"},{"vendor":"belden","product":"hirschmann_rs20-1600m2m2sdau"},{"vendor":"belden","product":"hirschmann_rs20-1600m2t1sdau"},{"vendor":"belden","product":"hirschmann_rs20-1600s2m2sdau"},{"vendor":"belden","product":"hirschmann_rs20-1600s2s2sdau"},{"vendor":"belden","product":"hirschmann_rs20-1600s2t1sdau"},{"vendor":"belden","product":"hirschmann_rsb20-0800m2m2saab"},{"vendor":"belden","product":"hirschmann_rsb20-0800m2m2saabe"},{"vendor":"belden","product":"hirschmann_rsb20-0800m2m2taab"},{"vendor":"belden","product":"hirschmann_rsb20-0800m2m2taabe"},{"vendor":"belden","product":"hirschmann_rsb20-0800s2s2saab"},{"vendor":"belden","product":"hirschmann_rsb20-0800s2s2saabe"},{"vendor":"belden","product":"hirschmann_rsb20-0800s2s2taab"},{"vendor":"belden","product":"hirschmann_rsb20-0800s2s2taabe"},{"vendor":"belden","product":"hirschmann_rsb20-0800t1t1saab"},{"vendor":"belden","product":"hirschmann_rsb20-0800t1t1saabe"},{"vendor":"belden","product":"hirschmann_rsb20-0800t1t1taab"},{"vendor":"belden","product":"hirschmann_rsb20-0800t1t1taabe"},{"vendor":"belden","product":"hirschmann_rsb20-0900m2ttsaab"},{"vendor":"belden","product":"hirschmann_rsb20-0900m2ttsaabe"},{"vendor":"belden","product":"hirschmann_rsb20-0900m2tttaab"},{"vendor":"belden","product":"hirschmann_rsb20-0900m2tttaabe"},{"vendor":"belden","product":"hirschmann_rsb20-0900mmm2saab"},{"vendor":"belden","product":"hirschmann_rsb20-0900mmm2saabe"},{"vendor":"belden","product":"hirschmann_rsb20-0900mmm2taab"},{"vendor":"belden","product":"hirschmann_rsb20-0900mmm2taabe"},{"vendor":"belden","product":"hirschmann_rsb20-0900s2ttsaab"},{"vendor":"belden","product":"hirschmann_rsb20-0900s2ttsaabe"},{"vendor":"belden","product":"hirschmann_rsb20-0900s2tttaab"},{"vendor":"belden","product":"hirschmann_rsb20-0900s2tttaabe"},{"vendor":"belden","product":"hirschmann_rsb20-0900vvm2saab"},{"vendor":"belden","product":"hirschmann_rsb20-0900vvm2saabe"},{"vendor":"belden","product":"hirschmann_rsb20-0900vvm2taab"},{"vendor":"belden","product":"hirschmann_rsb20-0900vvm2taabe"},{"vendor":"belden","product":"hirschmann_rsb20-0900zzz6saab"},{"vendor":"belden","product":"hirschmann_rsb20-0900zzz6saabe"},{"vendor":"belden","product":"hirschmann_rsb20-0900zzz6taab"},{"vendor":"belden","product":"hirschmann_rsb20-0900zzz6taabe"},{"vendor":"belden","product":"hirschmann_rsr20"},{"vendor":"belden","product":"hirschmann_rsr30"}],"references":[{"url":"http://www.securityfocus.com/bid/103340","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-065-01","tags":["x_refsource_MISC","x_transferred","Mitigation","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5465"},{"url":"https://github.com/advisories/GHSA-9xwx-w5gp-5r6x"}],"sources":{"cve":[{"id":"CVE-2018-5465","description":"A Session Fixation issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. A session fixation vulnerability in the web interface has been identified, which may allow an attacker to hijack web sessions.","status":"published","published":"2018-03-06T21:00:00Z","modified":"2024-08-05T05:33:44.417Z","cwes":["CWE-384"],"updated_at":"2026-11-02T14:35:01.28843Z"}],"euvd":[{"id":"EUVD-2018-17235","description":"A Session Fixation issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. A session fixation vulnerability in the web interface has been identified, which may allow an attacker to hijack web sessions.","status":"published","published":"2018-03-06T21:00:00Z","modified":"2024-08-05T05:33:44Z","updated_at":"2026-11-03T02:40:10.651692Z"}],"ghsa":[{"id":"GHSA-9xwx-w5gp-5r6x","title":"A Session Fixation issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000,...","description":"A Session Fixation issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. A session fixation vulnerability in the web interface has been identified, which may allow an attacker to hijack web sessions.","status":"published","published":"2022-05-13T01:32:07Z","modified":"2023-02-01T05:08:25Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-384"],"updated_at":"2026-11-02T14:50:45.608979Z"}],"nvd":[{"id":"CVE-2018-5465","description":"A Session Fixation issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches. A session fixation vulnerability in the web interface has been identified, which may allow an attacker to hijack web sessions.","status":"published","published":"2018-03-06T21:29:00.3Z","modified":"2026-06-17T02:00:21.8Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-384"],"updated_at":"2026-11-02T14:04:23.783914Z"}]}}