Belden Hirschmann Hisecos Eagle vulnerabilities
2 vulnerabilities
Known vulnerabilities in Belden Hirschmann Hisecos Eagle, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-25236beldenhirschmann_hios+1
EPSS score0.50%
Hirschmann HiOS and HiSecOS products RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, RED, EAGLE contain an authentication bypass vulnerability in the HTTP(S) management module that allows unauthenticated remote attackers to gain administrative access by crafting specially formed HTTP requests. Attackers can exploit improper authentication handling to obtain the authentication status and privileges of a previously authenticated user without providing valid credentials.CVE-2023-7342beldenhirschmann hisecos eagleEPSS score0.27%
HiSecOS web server versions 03.4.00 prior to 04.1.00 contains a privilege escalation vulnerability that allows authenticated users with operator or auditor roles to escalate privileges to the administrator role by sending specially crafted packets to the web server. Attackers can exploit this flaw to gain full administrative access to the affected device.