Belden Hirschmann HiSecOS EAGLE vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Belden Hirschmann HiSecOS EAGLE: 2 record(s), with affected versions and fixes.
CVE-2018-25236
Critical · 9.8
CWE-287 Apr 3, 2026
Hirschmann HiOS HiSecOS Authentication Bypass via HTTP Management
Hirschmann HiOS and HiSecOS products RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, RED, EAGLE contain an authentication bypass vulnerability in the HTTP(S) management module that allows unauthenticated remote attackers to gain administrative access by crafting specially formed HTTP requests. Attackers can exploit improper authentication handling to obtain the authentication status and privileges of a previously authenticated user without providing valid credentials.
CVE-2023-7342
High · 8.8
CWE-269 Apr 2, 2026
Belden HiSecOS Web Server Privilege Escalation
HiSecOS web server versions 03.4.00 prior to 04.1.00 contains a privilege escalation vulnerability that allows authenticated users with operator or auditor roles to escalate privileges to the administrator role by sending specially crafted packets to the web server. Attackers can exploit this flaw to gain full administrative access to the affected device.