CVE-2024-14034criticalCWE-287

CVE-2024-14034: critical vulnerability in Belden Hirschmann HiEOS LRS11

Hirschmann HiEOS Authentication Bypass via HTTP Management Module

Published · Updated

Follow this CVE+ Monitor Hirschmann HiEOS LRS11

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.5%
Hirschmann HiEOS devices versions prior to 01.1.00 contain an authentication bypass vulnerability in the HTTP(S) management module that allows unauthenticated remote attackers to gain administrative access by sending specially crafted HTTP(S) requests. Attackers can exploit improper authentication handling to obtain elevated privileges and perform unauthorized actions including configuration download or upload and firmware modification.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Belden · Hirschmann HiEOS LRS11