Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2020-37216

Hirschmann HiOS EtherNet/IP Stack Denial of Service

Description

Hirschmann HiOS devices versions prior to 08.1.00 and 07.1.01 contain a denial of service vulnerability in the EtherNet/IP stack where improper handling of packet length fields allows remote attackers to crash or hang the device. Attackers can send specially crafted UDP EtherNet/IP packets with a length value larger than the actual packet size to render the device inoperable.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Belden Hirschmann HiOS

Default version status: affected

  • >= 08.1.00unaffected
  • >= 07.1.01unaffected
  • 05.00.00 to ≤ 08.0.00affected

References