Approved changes feed: RSS · Atom

cpe:2.3:a:belden:hirschmann_hisecos_eagle:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBelden (021f582b-a413-5db5-bc21-4c16e48856d4)
ProductHirschmann Hisecos Eagle (27a066d9-a108-54c9-b0df-91219c035319)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-7342 vulnerable 2026-06-08 06:21:57.620194 Belden HiSecOS Web Server Privilege Escalation
HIGH (8.8)
HiSecOS web server versions 03.4.00 prior to 04.1.00 contains a privilege escalation vulnerability that allows authenticated users with operator or auditor roles to escalate privileges to the administrator role by sending specially crafted packets to the web server. Attackers can exploit this flaw to gain full administrative access to the affected device.
Published: 2026-04-02T18:27:15.226Z
Updated: 2026-05-14T02:07:08.561Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-25236 vulnerable 2026-06-08 05:11:29.650588 Hirschmann HiOS HiSecOS Authentication Bypass via HTTP Management
CRITICAL (9.8)
Hirschmann HiOS and HiSecOS products RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, RED, EAGLE contain an authentication bypass vulnerability in the HTTP(S) management module that allows unauthenticated remote attackers to gain administrative access by crafting specially formed HTTP requests. Attackers can exploit improper authentication handling to obtain the authentication status and privileges of a previously authenticated user without providing valid credentials.
Published: 2026-04-03T22:44:43.486Z
Updated: 2026-07-15T01:23:30.343Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.