CVE-2018-25237
Belden Hirschmann HiSecOS Classic Firewall (EAGLE, EAGLE One) 취약점
Hirschmann HiSecOS devices versions prior to 05.3.03 contain a buffer overflow vulnerability in the HTTPS login interface when RADIUS authentication is enabled that allows remote attackers to crash the device or execute arbitrary code by submitting a password longer than 128 characters. Attackers can exploit improper bounds checking in password handling to overflow a fixed-size buffer and achieve denial of service or remote code execution.
- 대응 우선순위
- 점검
- CVSS
- 9.3
- EPSS
- 0.82% 백분위 53.6% · 2026.08.05 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.04.04