CVE-2022-4986

HighCVSS 7.5

Published: 02/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.44%

36th percentile - higher than 36% of all known CVEs

Summary

Hirschmann EagleSDV version 05.4.01 before 05.4.02 has a denial-of-service vulnerability during session establishment using TLS 1.0 or TLS 1.1. An attacker can initiate TLS connections with these versions, causing the device to crash.

Risk Assessment

An attacker can disrupt service availability by crashing the device, affecting network continuity.

Recommendation

Update Hirschmann EagleSDV to version 05.4.02 or later, which fixes this vulnerability.

Other vulnerabilities in Hirschmann EagleSDV

CVE-2024-14033High
A denial-of-service vulnerability in Hirschmann EagleSDV firmware prior to version 05.4.02 during TLS session establishment allows attackers to crash the device during TLS handshake by exploiting protocol downgrades to TLS 1.0 or TLS 1.1.

Original NVD description (English source)

Hirschmann EagleSDV version 05.4.01 prior to 05.4.02 contains a denial-of-service vulnerability that causes the device to crash during session establishment when using TLS 1.0 or TLS 1.1. Attackers can trigger a crash by initiating TLS connections with these protocol versions to disrupt service availability.