CVE-2020-9307 is a denial-of-service vulnerability affecting Hirschmann OS2, RSP, and RSPE devices running HiOS versions prior to 08.3.00. An unauthenticated, adjacent attacker can trigger an infinite loop on a High-availability Seamless Redundancy (HSR) ring port, disrupting the ring's redundancy. If two devices are affected, the HSR ring can be segmented, leading to communication loss. The vulnerability has a CVSS score of 6.5 (Medium), indicating a moderate severity. It requires adjacent network access (AV:A) and no user interaction (UI:N), making it relatively easy to exploit. The primary impact is high availability (A:H) due to the denial of service. There is no evidence of active exploitation, nor is public exploit code available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness and attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 07.0.04, < 07.1.00CPE matchmatch criteria | cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:* | ||
>= 08.0.00, < 08.3.00CPE matchmatch criteria | cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.