CVE Intelligence
Analysis AI-assisted

CVE-2024-14034: Hirschmann HiEOS Authentication Bypass in HTTP Management Module

According to the record, Hirschmann HiEOS devices before 01.1.00 contain an authentication bypass in the HTTP(S) management module that can give unauthenticated remote attackers administrative access. CVSS 3.1 scores it 9.8 (critical). No KEV listing or confirmed exploitation appears in the sources consulted.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2024-14034 is an authentication bypass in the HTTP(S) management module of Hirschmann HiEOS devices. The weakness is classified as CWE-287 (Improper Authentication). The record states that versions prior to 01.1.00 are affected.

Impact

The record states that an unauthenticated remote attacker could gain administrative access and perform unauthorized actions, including configuration download or upload and firmware modification. The CVSS 3.1 base score is 9.8 with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. VulnCheck also lists a CVSS 4.0 score of 9.3.

Affected products and versions

  • Belden Hirschmann HiEOS LRS11: versions below 01.1.00, as listed in the record.

The record's structured fixes field is empty. The affected range suggests 01.1.00 may be the first unaffected release, but this should be confirmed in the Belden security bulletin.

Exploitation status

The CISA KEV catalog does not list this CVE according to the record. No confirmed exploitation in the wild appears in the sources consulted. The SSVC record shows exploitation as none and automatable as yes. The EPSS probability is 0.00456 with a percentile of 0.37807.

Remediation and mitigation

  • Inventory HiEOS devices and compare firmware versions with the affected range.
  • Follow the vendor guidance in the Belden security bulletin and apply the recommended update.
  • Until devices are updated, limit access to HTTP(S) management interfaces to trusted administrative networks and do not expose them to the internet.
  • Review the VulnCheck advisory for additional third-party context.

Detection guidance

  • Review management interface logs for administrative sessions from unexpected sources or at unusual times.
  • Monitor for unexpected configuration downloads or uploads and for unplanned firmware changes.
  • Compare device configurations and firmware against known-good baselines.

Limitations of the available information

  • The record does not state a fixed version in its structured fields.
  • The record does not describe the specific request conditions in detail, and this analysis does not add them.
  • The EPSS date in the record is later than the publication date, so the EPSS values should be read as a snapshot.
  • The vendor bulletin and VulnCheck advisory were not reviewed in full for this analysis.

Frequently asked questions

What does CVE-2024-14034 affect?

According to the record, Belden Hirschmann HiEOS LRS11 devices with versions below 01.1.00 are affected through an authentication bypass in the HTTP(S) management module.

Is this vulnerability known to be exploited?

The record shows it is not listed in the CISA KEV catalog, and no confirmed exploitation in the wild appears in the sources consulted. The SSVC exploitation value is none.

What should administrators do now?

Check firmware versions, follow the Belden security bulletin for the recommended update, and restrict access to management interfaces to trusted administrative networks until devices are updated.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.