CVE-2021-27734

CVE-2021-27734 affects Hirschmann HiOS 07.1.01, 07.1.02, 08.1.00–08.5.xx and HiSecOS 03.3.00–03.5.01, allowing remote attackers to change credentials of existing users. Descriptions span NVD, Red Hat, Nessus plugin and CNNVD; no exploit specifics are provided in the connected documents. CVSS v3.1...

CVE-2020-6994

A buffer overflow vulnerability was found in some devices of Hirschmann Automation and Control HiOS and HiSecOS. The vulnerability is due to improper parsing of URL arguments. An attacker could exploit this vulnerability by specially crafting HTTP requests to overflow an internal buffer. The...

CVE-2020-6994

A buffer overflow vulnerability was found in some devices of Hirschmann Automation and Control HiOS and HiSecOS. The vulnerability is due to improper parsing of URL arguments. An attacker could exploit this vulnerability by specially crafting HTTP requests to overflow an internal buffer. The...

Buffer overflow

A buffer overflow vulnerability was found in some devices of Hirschmann Automation and Control HiOS and HiSecOS. The vulnerability is due to improper parsing of URL arguments. An attacker could exploit this vulnerability by specially crafting HTTP requests to overflow an internal buffer. The...

CVE-2020-6994

A buffer overflow vulnerability was found in some devices of Hirschmann Automation and Control HiOS and HiSecOS. The vulnerability is due to improper parsing of URL arguments. An attacker could exploit this vulnerability by specially crafting HTTP requests to overflow an internal buffer. The...

CVE-2020-6994

CVE-2020-6994 is a buffer/overflow vulnerability in Hirschmann HiOS and HiSecOS caused by improper parsing of URL arguments. A remote attacker could craft HTTP requests to overflow an internal buffer, potentially fully compromising affected devices. Affected products include HiOS 07.0.02 and olde...

Hirschmann Automation and Control HiOS and HiSecOS Products

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Hirschmann Automation and Control GmbH, a division of Belden Inc. Equipment: HiOS, HiSecOS Vulnerability: Classic Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability...