CVE-2018-25236

Hirschmann HiOS HiSecOS Authentication Bypass via HTTP Management

State: Published
Severity: 9.3 Critical
Published: Apr 3, 2026
Updated: Jul 15, 2026
Reserved: Apr 3, 2026

Description

Hirschmann HiOS and HiSecOS products RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, RED, EAGLE contain an authentication bypass vulnerability in the HTTP(S) management module that allows unauthenticated remote attackers to gain administrative access by crafting specially formed HTTP requests. Attackers can exploit improper authentication handling to obtain the authentication status and privileges of a previously authenticated user without providing valid credentials.

Scores

CVSS	Score	Vector	Source
4.0	9.3 Critical	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	VulnCheck
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	VulnCheck

Weaknesses

CWE-287 Improper Authentication (CWE-287)

Affected Products

Product	Versions
Hirschmann HiOSBelden	05.07 and earlierAffected 06.1.04 and earlierAffected 06.2.00 and earlierAffected 06.1.05Not affected 07.0.00Not affected 03.1.00Not affected
Hirschmann HiSecOS EAGLEBelden	03.00.02 and earlierAffected 03.0.03Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.