CVE Feed

    Dashboard / CVE / CVE-2018-25237

    CVE-2018-25237

    Hirschmann HiSecOS devices versions prior to 05.3.03 contain a buffer overflow vulnerability in the HTTPS login interface when RADIUS authentication is enabled that allows remote attackers to crash the device or execute arbitrary code by submitting a password longer than 128 characters. Attackers can exploit improper bounds checking in password handling to overflow a fixed-size buffer and achieve denial of service or remote code execution.

    Published:Apr 3, 2026
    Last Modified:Apr 7, 2026
    EPS:Apr 3, 2026
    EPSS Score:0.0008
    CVSS Score:9.8

    Affected Products

    Vendor
    Belden
    Product
    Hirschmann Eagle One
    Vendor
    Belden
    Product
    Hirschmann Hisecos

    Exploits

    No exploit reference

    Related CVEs

    CVE-2019-12262 (CVSS 9.8) — Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET s…
    CVE-2019-12261 (CVSS 9.8) — Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is a…
    CVE-2019-12260 (CVSS 9.8) — Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET sec…
    CVE-2019-12258 (CVSS 7.5) — Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnera…
    CVE-2019-12255 (CVSS 9.8) — Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnera…
    CVE-2019-12265 (CVSS 5.3) — Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There…
    CVE-2019-12263 (CVSS 8.1) — Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET …
    CVE-2019-12259 (CVSS 7.5) — Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There i…
    CVE-2019-12256 (CVSS 9.8) — Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnera…
    CVE-2019-12257 (CVSS 8.8) — Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET secur…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High