CVE-2017-6038

7.1 highEPSS 0.4%

High (7.1) in belden hirschmann gecko lite managed switch firmware. EPSS 0.4% chance of exploitation in the next 30 days.

A Cross-Site Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. The web application does not sufficiently verify that requests were provided by the user who submitted the request.

Severity

CVSS 3.0

7.1 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2017-06-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

belden_hirschmann:gecko_lite_managed_switch_firmware

References

https://ics-cert.us-cert.gov/advisories/ICSA-17-026-02A
https://ics-cert.us-cert.gov/advisories/ICSA-17-026-02A

Check your stack JSON