Belden is committed to providing the most reliable, secure solutions to ensure peace-of-mind for our customers. We continually review our products for issues arising from global security attacks. Belden's security vulnerabilities will be communicated promptly and with complete transparency.
Report Security Vulnerability| Identifier | Title | Version | Last Updated | |
|---|---|---|---|---|
| BSECV-2017-16, CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13084, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088 | WPA2 Key Reinstallation Attack (KRACK) vulnerabilities in Hirschmann BAT devices | 1.0 | Oct 24, 2017 | Download |
| BSECV-2015-1, CVE-2014-3566 | Vulnerability in SSL 3.0 Could Allow Information Disclosure | 1.0 | Feb 18, 2015 | Download |
| Identifier | Title | Version | Last Updated | |
|---|---|---|---|---|
| BSECV-2018-02 | Weaknesses in Hirschmann Classic Platform switches when using plaintext HTTP for remote management access | 1.1 | Mar 9, 2018 | Download |
| BSECV-2018-03 | Weaknesses in Hirschmann Classic Platform switches in the user authentication module | 1.1 | Mar 9, 2018 | Download |
| BSECV-2018-04 | RADIUS authentication vulnerability | 1.0 | Feb 26, 2018 | Download |
| BSECV-2017-14, CVE-2017-11400, CVE-2017-11401, CVE-2017-11402 | Potential Tofino Firmware Signing / Protocol Filering Evasion / Firewall Bypass | 1.0 | Nov 6, 2017 | Download |
|
BSECV-2017-2 |
Unauthenticated remote code execution vulnerability in Industrial HiVision | 1.0 | Aug 18, 2017 | Download |
|
BSECV-2017-12 |
Vulnerability in the bundled Java Runtime Environment let's local users execute arbitrary code in Industrial HiVision, HiFusion and HiView | 1.0
|
Aug 11, 2017 | Download |
|
BSECV-2017-10 |
ProSoft ICX35 User Interface Input Validation Issue | 1.0 | May 8, 2017 | Download |
| BSECV-2017-9 | ProSoft ICX35 Authentication Vulnerability | 1.0 | May 8, 2017 | Download |
| BSECV-2017-8 | Belden GarrettCom MNS 6K and 10K Device Access and Security Key Vulnerabilities | 1.0 | May 8, 2017 | Download |
| BSECV-2017-3 | Potential false forward of IPv4 multicast / broadcast traffic by HiLCOS Layer-2 Firewall | 1.0 | May 8, 2017 | Download |
| BSECV-2017-7 | Possible Request Forgery Vulnerabilities for GECKO Devices | 1.0 | April 7, 2017 | Download |
| BSECV-2017-1 | Restricted user roles may gain write access to devices managed by Industrial HiVision | 1.0 | Jan 6, 2017 | Download |
| BSECV-2016-5 | Possible Information Disclosure for GECKO Devices | 1.0 | Dec 19, 2016 | Download |
| BSECV-2016-4 | HiOS TCP Initial Sequence Number Predictability | 1.0 | Jun 6, 2016 | Download |
| BSECV-2016-2 | Password Synchronization with SNMP v1/v2 Communities | 1.1 | Dec 19, 2016 | Download |
| BSECV-2016-1 | GECKO authentication bypass | 1.0 | Mar 7, 2016 | Download |
| BSECV-2015-5 | Identical SSH and SSL default keys in HiLCOS products | 1.0 | Dec 11, 2015 | Download |
| BSECV-2015-4, CVE-2008-0960 |
SNMPv3 Authentication Bypass | 1.0 | Jul 10, 2015 | Download |
| BSECV-2015-3 | Belden GarrettCom MNS 6K and 10K Security Keys, Embedded Password, Cross-site Scripting and Web Server DOS Vulnerabilities |
1.0 | Jun 5, 2015 | Download |
| BSECV-2015-2 | Earlier versions of HiView do not verify the server identity for HTTPS and SSH | 1.0 | Jan 21, 2015 | Download |
| Identifier | Title | Version | Last Updated | |
|---|---|---|---|---|
| BSECV-2017-16, CVE-2017-13077, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13084, CVE-2017-13086, CVE-2017-13087, CVE-2017-13088 | WPA2 Key Reinstallation Attack (KRACK) vulnerabilities in Hirschmann BAT devices | 1.0 | Oct 24, 2017 | Download |
| BSECV-2015-1, CVE-2014-3566 | Vulnerability in SSL 3.0 Could Allow Information Disclosure | 1.0 | Feb 18, 2015 | Download |
| Identifier | Title | Version | Last Updated | |
|---|---|---|---|---|
| BSECV-2018-02 | Weaknesses in Hirschmann Classic Platform switches when using plaintext HTTP for remote management access | 1.1 | Mar 9, 2018 | Download |
| BSECV-2018-03 | Weaknesses in Hirschmann Classic Platform switches in the user authentication module | 1.1 | Mar 9, 2018 | Download |
| BSECV-2018-04 | RADIUS authentication vulnerability | 1.0 | Feb 26, 2018 | Download |
| BSECV-2017-14, CVE-2017-11400, CVE-2017-11401, CVE-2017-11402 | Potential Tofino Firmware Signing / Protocol Filering Evasion / Firewall Bypass | 1.0 | Nov 6, 2017 | Download |
|
BSECV-2017-2 |
Unauthenticated remote code execution vulnerability in Industrial HiVision | 1.0 | Aug 18, 2017 | Download |
|
BSECV-2017-12 |
Vulnerability in the bundled Java Runtime Environment let's local users execute arbitrary code in Industrial HiVision, HiFusion and HiView | 1.0
|
Aug 11, 2017 | Download |
|
BSECV-2017-10 |
ProSoft ICX35 User Interface Input Validation Issue | 1.0 | May 8, 2017 | Download |
| BSECV-2017-9 | ProSoft ICX35 Authentication Vulnerability | 1.0 | May 8, 2017 | Download |
| BSECV-2017-8 | Belden GarrettCom MNS 6K and 10K Device Access and Security Key Vulnerabilities | 1.0 | May 8, 2017 | Download |
| BSECV-2017-3 | Potential false forward of IPv4 multicast / broadcast traffic by HiLCOS Layer-2 Firewall | 1.0 | May 8, 2017 | Download |
| BSECV-2017-7 | Possible Request Forgery Vulnerabilities for GECKO Devices | 1.0 | April 7, 2017 | Download |
| BSECV-2017-1 | Restricted user roles may gain write access to devices managed by Industrial HiVision | 1.0 | Jan 6, 2017 | Download |
| BSECV-2016-5 | Possible Information Disclosure for GECKO Devices | 1.0 | Dec 19, 2016 | Download |
| BSECV-2016-4 | HiOS TCP Initial Sequence Number Predictability | 1.0 | Jun 6, 2016 | Download |
| BSECV-2016-2 | Password Synchronization with SNMP v1/v2 Communities | 1.1 | Dec 19, 2016 | Download |
| BSECV-2016-1 | GECKO authentication bypass | 1.0 | Mar 7, 2016 | Download |
| BSECV-2015-5 | Identical SSH and SSL default keys in HiLCOS products | 1.0 | Dec 11, 2015 | Download |
| BSECV-2015-4, CVE-2008-0960 |
SNMPv3 Authentication Bypass | 1.0 | Jul 10, 2015 | Download |
| BSECV-2015-3 | Belden GarrettCom MNS 6K and 10K Security Keys, Embedded Password, Cross-site Scripting and Web Server DOS Vulnerabilities |
1.0 | Jun 5, 2015 | Download |
| BSECV-2015-2 | Earlier versions of HiView do not verify the server identity for HTTPS and SSH | 1.0 | Jan 21, 2015 | Download |