Lucene search
+L

14 matches found

NVD
NVD
•added 2026/09/15 3:17 p.m.•13 views

CVE-2026-89025

Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTPS content. A remote unauthenticated attacker can send a specially crafted HTTPS request to a specific endpoint that is processed incorrectly, causing the...

8.7CVSS0.0077EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/15 2:13 p.m.•12 views

CVE-2026-89025 Hirschmann HiOS Switch Platform DoS via Malformed HTTP Request

Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTPS content. A remote unauthenticated attacker can send a specially crafted HTTPS request to a specific endpoint that is processed incorrectly, causing the...

8.7CVSS5.7AI score0.0077EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/15 2:13 p.m.•14 views

EUVD-2026-78581

Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTPS content. A remote unauthenticated attacker can send a specially crafted HTTPS request to a specific endpoint that is processed incorrectly, causing the...

8.7CVSS5.7AI score0.0077EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/15 2:13 p.m.•23 views

CVE-2026-89025

Hirschmann HiOS Switch Platform devices are affected by a denial-of-service vulnerability in the integrated web server caused by missing validation of HTTP(S) content. A remote unauthenticated attacker can send a specially crafted HTTP(S) request to a specific endpoint, causing the device to perf...

8.7CVSS5.7AI score0.0077EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/15 2:13 p.m.•36 views

CVE-2026-89025 Hirschmann HiOS Switch Platform DoS via Malformed HTTP Request

Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTPS content. A remote unauthenticated attacker can send a specially crafted HTTPS request to a specific endpoint that is processed incorrectly, causing the...

8.7CVSS0.0077EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•3 views

CVE-2026-89025: Improper Handling of Exceptional Conditions

Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTPS content. A remote unauthenticated attacker can send a specially crafted HTTPS request to a specific endpoint that is processed incorrectly, causing the...

8.7CVSS5.7AI score0.0077EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/02 9:32 p.m.•21 views

EUVD-2025-209199

HiOS Switch Platform contains a denial-of-service vulnerability in the web interface that allows remote attackers to reboot the affected device by sending a malicious HTTP GET request to a specific endpoint. Attackers can trigger an uncontrolled reboot condition through crafted HTTP requests to...

9.2CVSS6AI score0.00511EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/02 9:16 p.m.•17 views

CVE-2025-15620

HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerability in the web interface that allows remote attackers to reboot the affected device by sending a malicious HTTP GET request to a specific endpoint. Attackers can trigger an...

9.2CVSS0.00511EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/04/02 8:28 p.m.•39 views

CVE-2025-15620 HiOS Switch Platform Denial-of-Service via Web Interface

HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerability in the web interface that allows remote attackers to reboot the affected device by sending a malicious HTTP GET request to a specific endpoint. Attackers can trigger an...

9.2CVSS0.00511EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/04/02 8:28 p.m.•7 views

CVE-2025-15620

HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerability in the web interface that allows remote attackers to reboot the affected device by sending a malicious HTTP GET request to a specific endpoint. Attackers can trigger an...

9.2CVSS5.8AI score0.00511EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/04/02 8:28 p.m.•34 views

CVE-2025-15620

The HiOS Switch Platform has a denial-of-service vulnerability in its web interface. A remote attacker can trigger an uncontrolled reboot by sending a crafted HTTP GET request to a specific endpoint, leading to service disruption and switch unavailability. The available documents confirm the web ...

9.2CVSS5.9AI score0.00511EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/02 8:28 p.m.•9 views

CVE-2025-15620 HiOS Switch Platform Denial-of-Service via Web Interface

HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerability in the web interface that allows remote attackers to reboot the affected device by sending a malicious HTTP GET request to a specific endpoint. Attackers can trigger an...

9.2CVSS5.9AI score0.00511EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/02 12:00 a.m.•41 views

PT-2026-29894

Name of the Vulnerable Software and Affected Versions HiOS Switch Platform versions 09.1.00 through 09.4.04 and version 10.3.01. Description The HiOS Switch Platform contains a denial-of-service issue in the web interface. Remote attackers can reboot the affected device by sending a malicious HTT...

9.2CVSS5.5AI score0.00511EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/02 12:00 a.m.•3 views

CVE-2025-15620: Missing Authentication for Critical Function

HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerability in the web interface that allows remote attackers to reboot the affected device by sending a malicious HTTP GET request to a specific endpoint. Attackers can trigger an...

9.2CVSS5.9AI score0.00511EPSS
SaveExploits0References4
Rows per page
Query Builder