Belden ICX35 flaw bypasses login lockout
A CERT-FR advisory warns of a security bypass vulnerability in Belden ICX35-HWC switches that allows attackers to reset login lockout protections.
Sourcecert.cyber.gouv.fr — open the original
What to check
- Applies to
- Not tied to a specific actor, malware or CVE, only to the sectors it covers, so it may be general reporting. Check the source before acting on it. Whether it concerns you is not assessed.
CERT-FR issued an advisory describing a vulnerability affecting Belden ICX35-HWC-A and ICX35-HWC-E industrial networking products running firmware versions prior to 1.14.158. The flaw allows an attacker to bypass a security policy, specifically related to login lockout reset mechanisms as detailed in Belden's own PSIRT-9 security bulletin published October 28, 2026.
The vulnerability enables circumvention of account lockout protections, which could facilitate brute-force or repeated authentication attempts against the affected devices without triggering the intended lockout defenses. No in-the-wild exploitation is mentioned in the advisory.
Defenders operating Belden ICX35-HWC-A or ICX35-HWC-E devices should consult the vendor bulletin and update to firmware version 1.14.158 or later to remediate the issue. Organizations in sectors relying on Belden industrial networking equipment, such as manufacturing and infrastructure, should prioritize patching given the security-control bypass nature of the flaw.
Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1407
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 16,445 reports from 149 sources, 666 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.
Create a free account What it costs