Belden vulnerabilities, page 3
50 vulnerabilities
Known vulnerabilities in Belden products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 165 products.
CVE-2019-12260beldengarrettcom_magnum_dx940e_firmware+11
EPSS score23.25%
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion caused by a malformed TCP AO option.CVE-2019-12265beldengarrettcom_magnum_dx940e_firmware+10EPSS score59.80%
Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report.CVE-2019-12258beldengarrettcom_magnum_dx940e_firmware+10EPSS score22.77%
Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options.CVE-2019-12263beldengarrettcom_magnum_dx940e_firmware+10EPSS score3.16%
Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition.CVE-2019-12257beldengarrettcom_magnum_dx940e_firmware+9EPSS score84.18%
Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc.CVE-2019-12262beldengarrettcom_magnum_dx940e_firmware+6EPSS score4.12%
Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Logical Flaw).CVE-2026-89025beldenhirschmann hios switch platformEPSS score0.77%
Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTP(S) content. A remote unauthenticated attacker can send a specially crafted HTTP(S) request to a specific endpoint that is processed incorrectly, causing the device to perform an unintended reboot and resulting in a temporary denial-of-service condition. This vulnerability has been addressed in versions 07.1.12, 08.7.10, 09.0.13, 09.3.03, 10.3.08, and 10.5.00.CVE-2023-7343beldenhirschmann industrial hivisionEPSS score0.14%
Hirschmann Industrial HiVision versions 05.0.00 through 08.3.01 prior to 08.3.02 contain an arbitrary code execution vulnerability triggered when an administrator opens a maliciously crafted project file. Successful exploitation allows the attacker to execute code in the context of the HiVision process.CVE-2023-7342beldenhirschmann hisecos eagleEPSS score0.27%
HiSecOS web server versions 03.4.00 prior to 04.1.00 contains a privilege escalation vulnerability that allows authenticated users with operator or auditor roles to escalate privileges to the administrator role by sending specially crafted packets to the web server. Attackers can exploit this flaw to gain full administrative access to the affected device.CVE-2023-53908beldenhisecosEPSS score0.34%
HiSecOS 04.0.01 contains a privilege escalation vulnerability that allows authenticated users to modify their access role through XML-based NETCONF configuration. Attackers can send crafted XML payloads to the /mops_data endpoint with a specific role value to elevate their user privileges to administrative level.