Belden Hirschmann Hios Switch Platform vulnerabilities

2 vulnerabilities

Known vulnerabilities in Belden Hirschmann Hios Switch Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.2CVE-2025-15620beldenhios_switch+1
EPSS score
0.51%
HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerability in the web interface that allows remote attackers to reboot the affected device by sending a malicious HTTP GET request to a specific endpoint. Attackers can trigger an uncontrolled reboot condition through crafted HTTP requests to cause service disruption and unavailability of the switch.8.7CVE-2026-89025beldenhirschmann hios switch platform
EPSS score
0.77%
Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTP(S) content. A remote unauthenticated attacker can send a specially crafted HTTP(S) request to a specific endpoint that is processed incorrectly, causing the device to perform an unintended reboot and resulting in a temporary denial-of-service condition. This vulnerability has been addressed in versions 07.1.12, 08.7.10, 09.0.13, 09.3.03, 10.3.08, and 10.5.00.