CVE-2024-14033

HighCVSS 7.5

Published: 02/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

35th percentile - higher than 35% of all known CVEs

Summary

A denial-of-service vulnerability in Hirschmann EagleSDV firmware prior to version 05.4.02 during TLS session establishment allows attackers to crash the device during TLS handshake by exploiting protocol downgrades to TLS 1.0 or TLS 1.1.

Risk Assessment

An attacker can remotely crash the device, leading to service availability interruption.

Recommendation

Update Hirschmann EagleSDV firmware to version 05.4.02 or later.

Other vulnerabilities in Hirschmann EagleSDV

CVE-2022-4986High
Hirschmann EagleSDV version 05.4.01 before 05.4.02 has a denial-of-service vulnerability during session establishment using TLS 1.0 or TLS 1.1. An attacker can initiate TLS connections with these versions, causing the device to crash.

Original NVD description (English source)

Hirschmann EagleSDV firmware prior to 05.4.02 contains a denial-of-service vulnerability in TLS session establishment. Attackers can crash the device during TLS handshake by exploiting protocol downgrades to TLS 1.0 or TLS 1.1, interrupting service availability.