CVE-2018-25236
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
Hirschmann HiOS and HiSecOS products contain an authentication bypass vulnerability in the HTTP(S) management module. Unauthenticated remote attackers can gain administrative access by crafting specially formed HTTP requests.
Risk Assessment
An attacker can gain full control over the network device without valid credentials, leading to compromise of network confidentiality and integrity.
Recommendation
Immediately update the firmware to a patched version and restrict management interface access to trusted networks only.
Original NVD description (English source)
Hirschmann HiOS and HiSecOS products RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, RED, EAGLE contain an authentication bypass vulnerability in the HTTP(S) management module that allows unauthenticated remote attackers to gain administrative access by crafting specially formed HTTP requests. Attackers can exploit improper authentication handling to obtain the authentication status and privileges of a previously authenticated user without providing valid credentials.