CVE-2018-25237Disclosure

LOWCVSS 9.3 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Hirschmann HiSecOS devices versions prior to 05.3.03 contain a buffer overflow vulnerability in the HTTPS login interface when RADIUS authentication is enabled that allows remote attackers to crash the device or execute arbitrary code by submitting a password longer than 128 characters. Attackers can exploit improper bounds checking in password handling to overflow a fixed-size buffer and achieve denial of service or remote code execution.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-120

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

CVEFind.com@CveFindCom187d
Disclosure
[CVE-2018-25237: CRITICAL] Vulnerability alert: Hirschmann HiSecOS devices<05.3.03 have buffer overflow flaw in HTTPS login with RADIUS authentication. Attackers can crash the device or execute code via over...#cve,CVE-2018-25237,#cybersecurity https://cvefind.com/CVE-2018-25237
Post summary
The post alerts about a critical buffer overflow in Hirschmann HiSecOS devices (pre‑05.3.03) that could allow crashes or code execution via HTTPS login, but it does not mention any PoC, tool, active exploitation, or patch.
0000041
619 followersView on X
0day Signal@0dayPublishing187d
Disclosure
🚨 CVE-2018-25237: Hirschmann HiSecOS Buffer Overfl... 128-char password limit bypass on industrial firewalls = instant RCE with zero auth required—critical infra just got a ... https://zerodaysignal.com/vulnerability/CVE-2018-25237 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The tweet discloses a buffer overflow in Hirschmann HiSecOS firewalls that allows a password limit bypass and remote code execution without authentication, with no PoC, exploit code, or patch information provided.
0000059
204 followersView on X

Explore more

Back to dashboard