Skip to content
CVE PROGRAM SOURCE RECORD9.2 Critical

CVE-2025-15620

HiOS Switch Platform Denial-of-Service via Web Interface

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerability in the web interface that allows remote attackers to reboot the affected device by sending a malicious HTTP GET request to a specific endpoint. Attackers can trigger an uncontrolled reboot condition through crafted HTTP requests to cause service disruption and unavailability of the switch.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Belden Hirschmann HiOS Switch Platform

Default version status: unaffected

  • 09.1.00 to < 09.4.05affected
  • 10.0.00 to < 10.3.01affected

References