CVE-2017-5163

Publication date

2017-02-13 21:00:00

Family

icscert

State

PUBLISHED

Description

An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. After an administrator downloads a configuration file, a copy of the configuration file, which includes hashes of user passwords, is saved to a location that is accessible without authentication by path traversal.