Hirschmann HiOS Switch Platform Denial-of-Service Vulnerability via Malicious HTTP GET Request

A denial-of-service vulnerability has been identified in the Hirschmann HiOS Switch Platform, affecting versions since 09.1.00. The issue arises in the web interface, where remote attackers can disrupt service by sending crafted HTTP GET requests to a specific endpoint. This exploitation triggers an uncontrolled reboot of the device, causing temporary unavailability and disruption of switch services.

Impact

Exploitation of this vulnerability leads to an uncontrolled reboot of the affected device, causing service disruption and unavailability of the switch.

Remediation

Users are advised to update to version 09.4.05, 10.3.01 or higher.