CVE-2018-25237

Name of the Vulnerable Software and Affected Versions Hirschmann HiSecOS versions prior to 05.3.03

Description A buffer overflow occurs in the HTTPS login interface when RADIUS authentication is enabled. This issue stems from improper bounds checking during password handling, where submitting a password exceeding 128 characters can overflow a fixed-size buffer. This may allow a remote attacker to cause a denial of service by crashing the device or to achieve remote code execution.

Recommendations Update to version 05.3.03 or later.