Authentication Bypass Vulnerability in Hirschmann HiOS and HiSecOS Products

CVE-2018-25236

What is CVE-2018-25236?

A vulnerability exists in Hirschmann HiOS and HiSecOS products that permits unauthorized remote access via the HTTP(S) management interface. This authentication bypass issue allows attackers to exploit mishandled authentication processes, granting them administrative privileges without the need for valid credentials. By sending specially crafted HTTP requests, an attacker may effectively impersonate a previously authenticated user, undermining the security of the affected systems.

References