Authentication Bypass Vulnerability in Hirschmann HiOS and HiSecOS Products

CVE-2018-25236

What is CVE-2018-25236?

A vulnerability exists in Hirschmann HiOS and HiSecOS products that permits unauthorized remote access via the HTTP(S) management interface. This authentication bypass issue allows attackers to exploit mishandled authentication processes, granting them administrative privileges without the need for valid credentials. By sending specially crafted HTTP requests, an attacker may effectively impersonate a previously authenticated user, undermining the security of the affected systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References