Lucene search
+L

16 matches found

NVD
NVD
•added 2026/09/15 3:17 p.m.•13 views

CVE-2026-89025

Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTPS content. A remote unauthenticated attacker can send a specially crafted HTTPS request to a specific endpoint that is processed incorrectly, causing the...

8.7CVSS0.0077EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/15 2:13 p.m.•12 views

CVE-2026-89025 Hirschmann HiOS Switch Platform DoS via Malformed HTTP Request

Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTPS content. A remote unauthenticated attacker can send a specially crafted HTTPS request to a specific endpoint that is processed incorrectly, causing the...

8.7CVSS5.7AI score0.0077EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/15 2:13 p.m.•15 views

EUVD-2026-78581

Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTPS content. A remote unauthenticated attacker can send a specially crafted HTTPS request to a specific endpoint that is processed incorrectly, causing the...

8.7CVSS5.7AI score0.0077EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/15 2:13 p.m.•23 views

CVE-2026-89025

Hirschmann HiOS Switch Platform devices are affected by a denial-of-service vulnerability in the integrated web server caused by missing validation of HTTP(S) content. A remote unauthenticated attacker can send a specially crafted HTTP(S) request to a specific endpoint, causing the device to perf...

8.7CVSS5.7AI score0.0077EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/15 2:13 p.m.•36 views

CVE-2026-89025 Hirschmann HiOS Switch Platform DoS via Malformed HTTP Request

Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTPS content. A remote unauthenticated attacker can send a specially crafted HTTPS request to a specific endpoint that is processed incorrectly, causing the...

8.7CVSS0.0077EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•4 views

CVE-2026-89025: Improper Handling of Exceptional Conditions

Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTPS content. A remote unauthenticated attacker can send a specially crafted HTTPS request to a specific endpoint that is processed incorrectly, causing the...

8.7CVSS5.7AI score0.0077EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/02 9:32 p.m.•21 views

EUVD-2025-209199

HiOS Switch Platform contains a denial-of-service vulnerability in the web interface that allows remote attackers to reboot the affected device by sending a malicious HTTP GET request to a specific endpoint. Attackers can trigger an uncontrolled reboot condition through crafted HTTP requests to...

9.2CVSS6AI score0.00511EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/02 9:16 p.m.•17 views

CVE-2025-15620

HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerability in the web interface that allows remote attackers to reboot the affected device by sending a malicious HTTP GET request to a specific endpoint. Attackers can trigger an...

9.2CVSS0.00511EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/04/02 8:28 p.m.•39 views

CVE-2025-15620 HiOS Switch Platform Denial-of-Service via Web Interface

HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerability in the web interface that allows remote attackers to reboot the affected device by sending a malicious HTTP GET request to a specific endpoint. Attackers can trigger an...

9.2CVSS0.00511EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/04/02 8:28 p.m.•7 views

CVE-2025-15620

HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerability in the web interface that allows remote attackers to reboot the affected device by sending a malicious HTTP GET request to a specific endpoint. Attackers can trigger an...

9.2CVSS5.8AI score0.00511EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/02 8:28 p.m.•9 views

CVE-2025-15620 HiOS Switch Platform Denial-of-Service via Web Interface

HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerability in the web interface that allows remote attackers to reboot the affected device by sending a malicious HTTP GET request to a specific endpoint. Attackers can trigger an...

9.2CVSS5.9AI score0.00511EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/02 8:28 p.m.•35 views

CVE-2025-15620

The HiOS Switch Platform has a denial-of-service vulnerability in its web interface. A remote attacker can trigger an uncontrolled reboot by sending a crafted HTTP GET request to a specific endpoint, leading to service disruption and switch unavailability. The available documents confirm the web ...

9.2CVSS5.9AI score0.00511EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/02 12:00 a.m.•42 views

PT-2026-29894

Name of the Vulnerable Software and Affected Versions HiOS Switch Platform versions 09.1.00 through 09.4.04 and version 10.3.01. Description The HiOS Switch Platform contains a denial-of-service issue in the web interface. Remote attackers can reboot the affected device by sending a malicious HTT...

9.2CVSS5.5AI score0.00511EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/02 12:00 a.m.•3 views

CVE-2025-15620: Missing Authentication for Critical Function

HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerability in the web interface that allows remote attackers to reboot the affected device by sending a malicious HTTP GET request to a specific endpoint. Attackers can trigger an...

9.2CVSS5.9AI score0.00511EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/02/27 12:00 a.m.•20 views

SWITCH EV 代码问题漏洞

SWITCH EV is an electric vehicle charging facility management platform developed by the US company SWITCH. SWITCH EV has code-related vulnerabilities; these vulnerabilities stem from the predictable nature of session identifiers and the ability for multiple endpoints to use the same session...

7.5CVSS5.8AI score0.00579EPSS
SaveExploits0References3
Packet Storm
Packet Storm
•added 2021/04/23 12:00 a.m.•458 views

Sipwise C5 NGCP CSC Cross Site Request Forgery

Sipwise C5 NGCP CSC CSRF Click2Dial Exploit Vendor: Sipwise GmbH Product web page: https://www.sipwise.com Affected version: =CEm39.3.1 NGCP wwwadmin version 3.6.7 Summary: Sipwise C5 also known as NGCP - the Next Generation Communication Platform is a SIP-based Open Source Class 5 VoIP soft-swit...

0.2AI score0.00926EPSS
SaveExploits3
Rows per page
Query Builder