gecko lite managed switch firmware vulnerabilities and fixes

Recent CVEs affecting gecko lite managed switch firmware, with upgrade or downgrade steps. 4 tracked.

Also searched as: geckolitemanagedswitchfirmware.

gecko lite managed switch firmware has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2017-06-30. Highest priority: CVE-2017-5163 (score 46/100).

• CVE-2017-6040 MEDIUM 5.3 UPGRADE An Information Exposure issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 an
• CVE-2017-6038 HIGH 7.1 UPGRADE A Cross-Site Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.
• CVE-2017-6036 MEDIUM 6.5 UPGRADE A Server-Side Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0
• CVE-2017-5163 MEDIUM 5.9 UPGRADE An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions

FAQ

How do I fix gecko lite managed switch firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is gecko lite managed switch firmware being exploited right now?

None of the tracked gecko lite managed switch firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which gecko lite managed switch firmware CVE should I patch first?

CVE-2017-5163 currently ranks highest (46/100): An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions.

RSS feed for gecko lite managed switch firmware · ← Back to latest CVEs