CVE-2018-25236
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2018
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Hirschmann HiOS HiSecOS Authentication Bypass via HTTP Management
Hirschmann HiOS and HiSecOS products RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, RED, EAGLE contain an authentication bypass vulnerability in the HTTP(S) management module that allows unauthenticated remote attackers to gain administrative access by crafting specially formed HTTP requests. Attackers can exploit improper authentication handling to obtain the authentication status and privileges of a previously authenticated user without providing valid credentials.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Hirschmann HiOS
- Vendor
- Belden
- Product
- Hirschmann HiOS
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | Unavailable | 05.07 | None listed |
| 0 | affected | custom | Unavailable | 06.1.04 | None listed |
| 0 | affected | custom | Unavailable | 06.2.00 | None listed |
| 06.1.05 | unaffected | custom | Unavailable | Unavailable | None listed |
| 07.0.00 | unaffected | custom | Unavailable | Unavailable | None listed |
| 03.1.00 | unaffected | custom | Unavailable | Unavailable | None listed |
Hirschmann HiSecOS EAGLE
- Vendor
- Belden
- Product
- Hirschmann HiSecOS EAGLE
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | Unavailable | 03.00.02 | None listed |
| 03.0.03 | unaffected | custom | Unavailable | Unavailable | None listed |