Authentication Bypass Vulnerability in Hirschmann HiEOS Devices

CVE-2024-14034

What is CVE-2024-14034?

The Hirschmann HiEOS devices are susceptible to an authentication bypass flaw in their HTTP(S) management module. This vulnerability allows unauthenticated attackers to send specially crafted HTTP(S) requests, potentially granting them administrative access. By exploiting this flaw, attackers can manipulate the system to perform unauthorized activities, such as downloading or uploading configurations, and modifying firmware settings, thus compromising the integrity and security of the devices.

References