Belden records

32 published records for vendor belden.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 1 · 3.1%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

32 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
62This week	CVE-2019-12255Proof of concept	Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4).windriver · vxworks · CWE-120 Pre-auth Memory safety	Critical9.8	—	75.0%	Aug 9, 2019
60This week	CVE-2019-12257No exploit	Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component.windriver · vxworks · CWE-120 Pre-auth Memory safety	High8.8	—	84.1%	Aug 9, 2019
47Plan	CVE-2019-12256No exploit	Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component.windriver · vxworks · CWE-120 Pre-auth Memory safety	Critical9.8	—	26.6%	Aug 9, 2019
46Plan	CVE-2019-12260No exploit	Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4).windriver · vxworks · CWE-120 Pre-auth Memory safety	Critical9.8	—	23.2%	Aug 9, 2019
42Plan	CVE-2019-12261No exploit	Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4).windriver · vxworks · CWE-120 Pre-auth Memory safety	Critical9.8	—	8.9%	Aug 9, 2019
40Plan	CVE-2019-12262No exploit	Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component.windriver · vxworks Pre-auth	Critical9.8	—	4.1%	Aug 14, 2019
40Plan	CVE-2018-5469No exploit	An Improper Restriction of Excessive Authentication Attempts issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACHbelden · hirschmann rs20-0900mmm2tdau · CWE-307 Pre-auth	Critical9.8	—	2.8%	Mar 6, 2018
39Monitor	CVE-2019-12265No exploit	Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component.windriver · vxworks · CWE-401 Pre-auth Denial of service	Medium5.3	—	59.7%	Aug 9, 2019
39Monitor	CVE-2020-6994No exploit	A buffer overflow vulnerability was found in some devices of Hirschmann Automation and Control HiOS and HiSecOS.belden · hirschmann hios · CWE-12 Pre-auth	Critical9.8	—	1.6%	Apr 3, 2020
39Monitor	CVE-2017-11402No exploit	An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00.belden · tofino xenon security appliance firmware · CWE-20 Pre-auth	Critical9.8	—	1.5%	Nov 20, 2017
39Monitor	CVE-2017-11401No exploit	An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00.belden · tofino xenon security appliance firmware Pre-auth	Critical9.8	—	1.3%	Nov 20, 2017
39Monitor	CVE-2021-27734No exploit	Hirschmann HiOS 07.1.01, 07.1.02, and 08.1.00 through 08.5.xx and HiSecOS 03.3.00 through 03.5.01 allow remote attackers to change the credebelden · hirschmann hios · CWE-287 Pre-auth Auth bypass	Critical9.8	—	1.2%	May 17, 2021
39Monitor	CVE-2021-30064No exploit	On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, belden · tofino xenon security appliance firmware · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	0.9%	Apr 3, 2022
37Monitor	CVE-2019-12258Weaponized	Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component.windriver · vxworks · CWE-384 Pre-auth Denial of service	High7.5	—	22.7%	Aug 9, 2019
36Monitor	CVE-2022-40282No exploit	The web server of Hirschmann BAT-C2 before 09.13.01.00R04 allows authenticated command injection.belden · hirschmann bat-c2 firmware · CWE-77 RCE Command injection	High8.8	—	4.0%	Nov 25, 2022
36Monitor	CVE-2018-5465No exploit	A Session Fixation issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Swibelden · hirschmann rs20-0900mmm2tdau · CWE-384 Pre-auth	High8.8	—	1.7%	Mar 6, 2018
36Monitor	CVE-2025-15620No exploit	HiOS Switch Platform Denial-of-Service via Web Interfacebelden · hios switch · CWE-306 Pre-auth Auth bypass	Critical9.2	—	0.5%	Apr 2, 2026
35Monitor	CVE-2019-12259No exploit	Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component.windriver · vxworks · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	15.8%	Aug 9, 2019
33Monitor	CVE-2019-12263No exploit	Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4).windriver · vxworks · CWE-362 Pre-auth Race condition	High8.1	—	3.1%	Aug 9, 2019
30Monitor	CVE-2019-12264No exploit	Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client componentwindriver · vxworks · CWE-88 Pre-auth	High7.1	—	8.3%	Aug 5, 2019
30Monitor	CVE-2021-30063No exploit	On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can cabelden · tofino xenon security appliance firmware Pre-auth Denial of service	High7.5	—	0.9%	Apr 3, 2022
30Monitor	CVE-2021-30065No exploit	On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, belden · tofino xenon security appliance firmware Pre-auth	High7.5	—	0.8%	Apr 3, 2022
30Monitor	CVE-2021-30062No exploit	On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can bybelden · tofino xenon security appliance firmware Pre-auth	High7.5	—	0.8%	Apr 3, 2022
27Monitor	CVE-2021-30061No exploit	On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, belden · tofino xenon security appliance firmware	Medium6.8	—	0.4%	Apr 3, 2022
27Monitor	CVE-2017-11400No exploit	An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00.belden · tofino xenon security appliance firmware · CWE-347 Weak crypto	Medium6.8	—	0.2%	Nov 20, 2017

CVE-2019-12255
62This week
Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4).
CriticalCVSS 9.8Proof of conceptEPSS 75%
- Pre-auth
- Memory safety
windriver · vxworksAug 9, 2019
CVE-2019-12257
60This week
Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component.
HighCVSS 8.8No exploitEPSS 84%
- Pre-auth
- Memory safety
windriver · vxworksAug 9, 2019
CVE-2019-12256
47Plan
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component.
CriticalCVSS 9.8No exploitEPSS 26%
- Pre-auth
- Memory safety
windriver · vxworksAug 9, 2019
CVE-2019-12260
46Plan
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4).
CriticalCVSS 9.8No exploitEPSS 23%
- Pre-auth
- Memory safety
windriver · vxworksAug 9, 2019
CVE-2019-12261
42Plan
Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4).
CriticalCVSS 9.8No exploitEPSS 8%
- Pre-auth
- Memory safety
windriver · vxworksAug 9, 2019
CVE-2019-12262
40Plan
Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component.
CriticalCVSS 9.8No exploitEPSS 4%
- Pre-auth
windriver · vxworksAug 14, 2019
CVE-2018-5469
40Plan
An Improper Restriction of Excessive Authentication Attempts issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
belden · hirschmann rs20-0900mmm2tdauMar 6, 2018
CVE-2019-12265
39Monitor
Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component.
MediumCVSS 5.3No exploitEPSS 59%
- Pre-auth
- Denial of service
windriver · vxworksAug 9, 2019
CVE-2020-6994
39Monitor
A buffer overflow vulnerability was found in some devices of Hirschmann Automation and Control HiOS and HiSecOS.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
belden · hirschmann hiosApr 3, 2020
CVE-2017-11402
39Monitor
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
belden · tofino xenon security appliance firmwareNov 20, 2017
CVE-2017-11401
39Monitor
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
belden · tofino xenon security appliance firmwareNov 20, 2017
CVE-2021-27734
39Monitor
Hirschmann HiOS 07.1.01, 07.1.02, and 08.1.00 through 08.5.xx and HiSecOS 03.3.00 through 03.5.01 allow remote attackers to change the crede
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
belden · hirschmann hiosMay 17, 2021
CVE-2021-30064
39Monitor
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance,
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
belden · tofino xenon security appliance firmwareApr 3, 2022
CVE-2019-12258
37Monitor
Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component.
HighCVSS 7.5WeaponizedEPSS 22%
- Pre-auth
- Denial of service
windriver · vxworksAug 9, 2019
CVE-2022-40282
36Monitor
The web server of Hirschmann BAT-C2 before 09.13.01.00R04 allows authenticated command injection.
HighCVSS 8.8No exploitEPSS 4%
- RCE
- Command injection
belden · hirschmann bat-c2 firmwareNov 25, 2022
CVE-2018-5465
36Monitor
A Session Fixation issue was discovered in Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Swi
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
belden · hirschmann rs20-0900mmm2tdauMar 6, 2018
CVE-2025-15620
36Monitor
HiOS Switch Platform Denial-of-Service via Web Interface
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
belden · hios switchApr 2, 2026
CVE-2019-12259
35Monitor
Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component.
HighCVSS 7.5No exploitEPSS 15%
- Pre-auth
- Memory safety
- Denial of service
windriver · vxworksAug 9, 2019
CVE-2019-12263
33Monitor
Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4).
HighCVSS 8.1No exploitEPSS 3%
- Pre-auth
- Race condition
windriver · vxworksAug 9, 2019
CVE-2019-12264
30Monitor
Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component
HighCVSS 7.1No exploitEPSS 8%
- Pre-auth
windriver · vxworksAug 5, 2019
CVE-2021-30063
30Monitor
On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can ca
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
belden · tofino xenon security appliance firmwareApr 3, 2022
CVE-2021-30065
30Monitor
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance,
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
belden · tofino xenon security appliance firmwareApr 3, 2022
CVE-2021-30062
30Monitor
On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can by
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
belden · tofino xenon security appliance firmwareApr 3, 2022
CVE-2021-30061
27Monitor
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance,
MediumCVSS 6.8No exploitEPSS 0%
belden · tofino xenon security appliance firmwareApr 3, 2022
CVE-2017-11400
27Monitor
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00.
MediumCVSS 6.8No exploitEPSS 0%
- Weak crypto
belden · tofino xenon security appliance firmwareNov 20, 2017