CVE-2018-25236 is a critical authentication bypass vulnerability (CVSS 9.8) affecting the HTTP(S) management module of various Hirschmann HiOS and HiSecOS products, including RSP, RSPE, MSP, EES, and EAGLE. This flaw allows unauthenticated remote attackers to gain administrative access by crafting specific HTTP requests, exploiting improper authentication handling to assume the privileges of a previously authenticated user. The attack requires no user interaction or prior authentication, leading to a complete compromise of confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code availability (Metasploit, Nuclei, ExploitDB), or significant community discussion regarding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Belden | Hirschmann HiOS | >= 0, <= 05.07, >= 0, <= 06.1.04, >= 0, <= 06.2.00CNA affecteddefault unaffected | |
| Belden | Hirschmann HiSecOS EAGLE | >= 0, <= 03.00.02CNA affecteddefault unaffected |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.