Approved changes feed: RSS · Atom

cpe:2.3:a:belden:hirschmann_hios:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBelden (021f582b-a413-5db5-bc21-4c16e48856d4)
ProductHirschmann Hios (993853ca-bd46-5cdf-81ac-d6b37ee2b586)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-37216 not_vulnerable 2026-06-08 05:25:50.346164 Hirschmann HiOS EtherNet/IP Stack Denial of Service
HIGH (7.5)
Hirschmann HiOS devices versions prior to 08.1.00 and 07.1.01 contain a denial of service vulnerability in the EtherNet/IP stack where improper handling of packet length fields allows remote attackers to crash or hang the device. Attackers can send specially crafted UDP EtherNet/IP packets with a length value larger than the actual packet size to render the device inoperable.
Published: 2026-04-03T20:19:25.269Z
Updated: 2026-07-15T01:24:29.177Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-25236 vulnerable 2026-06-08 05:11:29.650030 Hirschmann HiOS HiSecOS Authentication Bypass via HTTP Management
CRITICAL (9.8)
Hirschmann HiOS and HiSecOS products RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, RED, EAGLE contain an authentication bypass vulnerability in the HTTP(S) management module that allows unauthenticated remote attackers to gain administrative access by crafting specially formed HTTP requests. Attackers can exploit improper authentication handling to obtain the authentication status and privileges of a previously authenticated user without providing valid credentials.
Published: 2026-04-03T22:44:43.486Z
Updated: 2026-07-15T01:23:30.343Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.