CVE Intelligence
Analysis AI-assisted

CVE-2018-25236: Hirschmann HiOS and HiSecOS Authentication Bypass in HTTP Management

CVE-2018-25236 is an improper authentication flaw (CWE-287) in the HTTP(S) management module of Hirschmann HiOS and HiSecOS products, according to the record. The record states that an unauthenticated remote attacker could gain administrative access using crafted HTTP requests, and it carries a CVSS 3.1 base score of 9.8 from VulnCheck. The record lists no fixed versions and no confirmed exploitation in the KEV catalog.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2018-25236 is an improper authentication issue (CWE-287) in the HTTP(S) management module of several Hirschmann industrial network products, including HiOS and HiSecOS. According to the record, an unauthenticated remote attacker can send specially formed HTTP requests to reach administrative functions. The record was published on 2026-04-03 and its status at NVD is Awaiting Analysis.

Impact

  • The CVSS 3.1 base score is 9.8 (Critical), with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, as reported by VulnCheck.
  • A CVSS 4.0 score of 9.3 is also listed for VulnCheck.
  • The record describes the result as administrative access and the ability to obtain the authentication status and privileges of a previously authenticated user, without valid credentials.
  • The SSVC values in the record are exploitation none, automatable yes and technical impact total.

Affected products and versions

The record lists the following version ranges, each up to and including the value shown:

  • Belden Hirschmann HiOS: up to 05.07, up to 06.1.04 and up to 06.2.00.
  • Belden Hirschmann HiSecOS EAGLE: up to 03.00.02.

The description names more product lines (RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, RED and EAGLE) than the affected list maps to version ranges. Check each product against the vendor bulletin before drawing conclusions.

Exploitation status

The record marks this CVE as not listed in the CISA KEV catalog. No confirmed exploitation appears in the sources consulted for this analysis. The SSVC exploitation value is none, and the EPSS probability is 0.00502 with a percentile of 0.41274. These are statistical estimates and do not confirm attacks.

Remediation and mitigation

  • The record lists no fixed versions. This does not mean no fix exists. Consult the Belden security bulletin BSECV-2018-05 referenced below for vendor guidance.
  • Inventory all Hirschmann HiOS and HiSecOS devices and identify those within the listed version ranges.
  • Restrict access to the HTTP(S) management interface to dedicated management networks using firewalls and access control lists.
  • Do not expose device management interfaces to the internet.
  • Prioritize devices with the highest operational criticality and plan maintenance windows for updates once the vendor guidance has been applied.

Detection guidance

  • Review web server and management access logs for requests from unexpected sources or unusual authentication patterns.
  • Alert on administrative sessions opened from addresses outside approved management networks.
  • Monitor network devices for configuration changes that cannot be traced to authorized personnel.

Limitations of the available information

  • The record provides no fixed versions and no technical details beyond the description.
  • It is not fully clear from the record whether every named product line is affected, or at which versions.
  • The record's source status is Awaiting Analysis, so an NVD-assigned score is not confirmed here. The scores cited come from VulnCheck.
  • The EPSS data in the record is dated 2026-10-13.

Frequently asked questions

Is CVE-2018-25236 known to be exploited in the wild?

No. The record shows that it is not listed in the CISA KEV catalog, and no confirmed exploitation appears in the sources consulted. The SSVC exploitation value is none.

Which Hirschmann versions does the record list as affected?

The record lists HiOS up to 05.07, up to 06.1.04 and up to 06.2.00, and HiSecOS EAGLE up to 03.00.02. Confirm product coverage with the vendor bulletin.

Is there a fixed version?

The record lists no fixed versions. That does not mean no fix exists, so check the Belden security bulletin BSECV-2018-05 for vendor guidance.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.