CVE-2018-25236criticalCWE-287

CVE-2018-25236: critical vulnerability in Belden Hirschmann HiOS

Hirschmann HiOS HiSecOS Authentication Bypass via HTTP Management

Published · Updated

Follow this CVE+ Monitor Hirschmann HiOS+ Monitor Hirschmann HiSecOS EAGLE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.5%
Hirschmann HiOS and HiSecOS products RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, RED, EAGLE contain an authentication bypass vulnerability in the HTTP(S) management module that allows unauthenticated remote attackers to gain administrative access by crafting specially formed HTTP requests. Attackers can exploit improper authentication handling to obtain the authentication status and privileges of a previously authenticated user without providing valid credentials.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Belden · Hirschmann HiOSBelden · Hirschmann HiSecOS EAGLE
Related CVEs — Belden Hirschmann HiOS

In the same product, most dangerous first.

CVE-2020-37216HIGHHirschmann HiOS EtherNet/IP Stack Denial of ServiceEPSS 0.9%CVE-2023-7342HIGHBelden HiSecOS Web Server Privilege EscalationEPSS 0.3%