Hirschmann HiOS EtherNet/IP Stack Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the EtherNet/IP stack of Hirschmann HiOS devices running versions prior to 08.1.00 and 07.1.01. The vulnerability arises from improper handling of packet length fields, allowing remote attackers to crash or hang the device. Exploitation involves sending specially crafted UDP EtherNet/IP packets with a length value greater than the actual packet size, rendering the device inoperable.

Impact

Exploitation of this vulnerability can cause the device to crash or become unresponsive, particularly when the EtherNet/IP protocol is active.

Remediation

Users are advised to update to Hirschmann HiOS version 08.1.00 or higher, or version 07.1.01 or higher, depending on their current version.