Firewall Bypass Vulnerability in Hirschmann HiLCOS OpenBAT and BAT450 Products

CVE-2021-4477

What is CVE-2021-4477?

Hirschmann HiLCOS OpenBAT and BAT450 products contain a vulnerability that enables a firewall bypass specifically within IPv6 IPsec deployments. This flaw allows attackers to establish IPv6 IPsec connections (using either IKEv1 or IKEv2) while utilizing an IPv6 Internet connection, which leads to the circumvention of configured firewall rules. As a result, malicious traffic from VPN connections can access the network without proper enforcement of firewall policies, exposing systems to potential attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References