Description
Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTP(S) content. A remote unauthenticated attacker can send a specially crafted HTTP(S) request to a specific endpoint that is processed incorrectly, causing the device to perform an unintended reboot and resulting in a temporary denial-of-service condition. This vulnerability has been addressed in versions 07.1.12, 08.7.10, 09.0.13, 09.3.03, 10.3.08, and 10.5.00.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Belden Hirschmann HiOS Switch Platform
Default version status: unaffected
07.0.0 to ≤ 07.1.11affected07.1.12unaffected08.0.0 to ≤ 08.7.09affected08.7.10unaffected09.0.00 to ≤ 09.0.12affected09.0.13unaffected09.3.00 to ≤ 09.3.02affected09.3.03unaffected10.0.0 to ≤ 10.3.07affected10.3.08unaffected10.4.00affected10.5.00affected