Description (CNA)
Hirschmann EagleSDV firmware prior to 05.4.02 contains a denial-of-service vulnerability in TLS session establishment. Attackers can crash the device during TLS handshake by exploiting protocol downgrades to TLS 1.0 or TLS 1.1, interrupting service availability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Belden / Hirschmann EagleSDV | unaffected 05.4.02; affected 0 before 05.4.01 |
CWE
CWE-400
References
- https://assets.belden.com/m/774d24c02be5c220/original/Belden_Security_Bulletin_BSECV-2024-16.pdf
- https://www.vulncheck.com/advisories/hirschmann-industrial-it-hilcos-heap-overflow-dos
ADP enrichment
No English description supplied.
No references supplied.