Heap Overflow Vulnerability in Hirschmann Industrial IT Products' Web Interface

CVE-2024-14033

What is CVE-2024-14033?

The HiLCOS web interface of Hirschmann Industrial IT products is susceptible to a heap overflow vulnerability that can be triggered remotely by unauthenticated attackers. By sending specifically crafted requests to the web interface, these attackers can initiate a denial-of-service condition, leading to device crashes and service disruptions, especially in setups utilizing the Public Spot functionality. This vulnerability poses significant risks to operational integrity and highlights the need for immediate attention to mitigate potential exploitation.

References