Hirschmann HiLCOS OpenBAT and BAT450 IPv6 IPsec Firewall Bypass Vulnerability

A firewall bypass vulnerability has been identified in Hirschmann HiLCOS OpenBAT and BAT450 products, specifically in versions 8.80-REL prior to 10.12-RU2. This vulnerability occurs in IPv6 IPsec deployments, allowing traffic from VPN connections to circumvent established firewall rules. Exploitation involves creating IPv6 IPsec connections, either IKEv1 or IKEv2, while using an IPv6 Internet connection, thereby bypassing firewall policy enforcement.

Impact

Exploitation of this vulnerability allows VPN traffic to bypass firewall rules, potentially exposing devices or networks to unwanted and harmful traffic.

Remediation

Users are advised to update to version 10.12-RU2 or later.