CVE-2018-25236 in Hirschmann HiOS
Summary
Hirschmann HiOS and HiSecOS products RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, RED, EAGLE contain an authentication bypass vulnerability in the HTTP(S) management module that allows unauthenticated remote attackers to gain administrative access by crafting specially formed HTTP requests. Attackers can exploit improper authentication handling to obtain the authentication status and privileges of a previously authenticated user without providing valid credentials.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Responsible
VulnCheck
Reservation
04/03/2026
Disclosure
04/04/2026
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 355251 | Belden Hirschmann HiOS/Hirschmann HiSecOS EAGLE improper authentication | 287 | Not defined | Official fix | CVE-2018-25236 |