Description (CNA)
Hirschmann HiOS devices versions prior to 08.1.00 and 07.1.01 contain a denial of service vulnerability in the EtherNet/IP stack where improper handling of packet length fields allows remote attackers to crash or hang the device. Attackers can send specially crafted UDP EtherNet/IP packets with a length value larger than the actual packet size to render the device inoperable.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Belden / Hirschmann HiOS | unaffected >= 08.1.00; unaffected >= 07.1.01; affected 05.00.00 through 08.0.00 |
CWE
CWE-20
References
- https://assets.belden.com/m/3d3e2cbfa4860258/original/Belden-Security-Bulletin-BSECV-2019-14.pdf
- https://www.vulncheck.com/advisories/hirschmann-hios-ethernet-ip-stack-denial-of-service
ADP enrichment
No English description supplied.
No references supplied.