CERT-FR advisory CERTFR-2026-AVI-1407: security policy bypass in Belden ICX35 industrial routers
CERT-FR issued advisory CERTFR-2026-AVI-1407 on 28 October 2026 relaying Belden security bulletin PSIRT-9-Login-Lockout-Resets-in-ICX35 of the same date. A vulnerability affects Belden ICX35-HWC-A and ICX35-HWC-E devices in versions prior to 1.14.158, allowing an attacker to achieve a security policy bypass. The bulletin title indicates the issue relates to login lockout resets, which would weaken brute-force protections on the device login. No CVE identifier, exploitation activity or further technical detail is provided.
Entenda a falha
A vulnerabilidade
A vulnerability in Belden ICX35-HWC-A and ICX35-HWC-E industrial routers allows a security policy bypass. Versions before 1.14.158 are affected and 1.14.158 fixes it. No CVE was assigned. The sources do not say what an attacker needs (network reach, authentication) or what they gain beyond the bypass. The bulletin title, 'Login Lockout Resets in ICX35', suggests the login lockout protection can be reset, which would weaken brute-force defenses; this is an inference from the title, not a confirmed detail.
Como funciona
The articles do not describe the mechanism. Judging only by the bulletin title, the device's login lockout, which should block further attempts after repeated failures, appears to be reset in some situation, so the failed-attempt counter does not hold. Which input or event triggers the reset, and at which step it fails, is not public in the sources.
Por que é vulnerável
The root cause is not stated. The CERT-FR advisory only says the flaw allows a security policy bypass, and the bulletin title points to a flaw in how login lockout state is handled. The fix is in firmware 1.14.158, but the sources do not explain what it changes.
Como foi descoberta
CERT-FR published advisory CERTFR-2026-AVI-1407 on 28 October 2026, relaying Belden PSIRT bulletin PSIRT-9-Login-Lockout-Resets-in-ICX35 of the same date. The sources do not say who found the flaw, how it was reported, or whether it has been exploited.
Explicação gerada por IA a partir da matéria e dos artigos, em 29/10/2026 13:29.
Remediação
- Update ICX35-HWC-A / ICX35-HWC-E firmware to version 1.14.158 or later per the Belden PSIRT bulletin.
Linha do tempo
-
CERT-FR advisory CERTFR-2026-AVI-1407: security policy bypass in Belden ICX35 industrial routers
ler a análise desta fonte ocultar
CERT-FR issued advisory CERTFR-2026-AVI-1407 on 28 October 2026 relaying Belden security bulletin PSIRT-9-Login-Lockout-Resets-in-ICX35 of the same date. A vulnerability affects Belden ICX35-HWC-A and ICX35-HWC-E devices in versions prior to 1.14.158, allowing an attacker to achieve a security policy bypass. The bulletin title indicates the issue relates to login lockout resets, which would weaken brute-force protections on the device login. No CVE identifier, exploitation activity or further technical detail is provided.
Remediation
- Update ICX35-HWC-A / ICX35-HWC-E firmware to version 1.14.158 or later per the Belden PSIRT bulletin.