Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Hirschmann HiEOS devices versions prior to 01.1.00 contain an authentication bypass vulnerability in the HTTP(S) management module that allows unauthenticated remote attackers to gain administrative access by sending specially crafted HTTP(S) requests. Attackers can exploit improper authentication handling to obtain elevated privileges and perform unauthorized actions including configuration download or upload and firmware modification.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-02 | 3 | Disclosure2General1 |
| 2026-04-03 | 1 | Disclosure1 |
CVE-2024-14034 Hirschmann HiEOS devices versions prior to 01.1.00 contain an authentication bypass vulnerability in the HTTP(S) management module that allows unauthenticated remote … https://www.cve.org/CVERecord?id=CVE-2024-14034
Post summary
CVE‑2024‑14034 is an authentication bypass flaw in HiEOS devices (versions before 01.1.00) that allows unauthenticated remote access via the HTTP(S) management module.
[CVE-2024-14034: CRITICAL] Beware: Hirschmann HiEOS devices have a critical authentication bypass vulnerability. Attackers can gain admin access remotely by sending crafted requests, leading to unauthorized ...#cve,CVE-2024-14034,#cybersecurity https://cvefind.com/CVE-2024-14034
Post summary
CVE-2024-14034 exposes a critical authentication bypass on Hirschmann HiEOS devices, enabling attackers to gain remote admin access through crafted requests, but no PoC, exploit, patch, or evidence of active exploitation is provided.
CVE-2024-14034: authentication bypass nos dispositivos Hirschmann HiEOS, CVSS 9.8. Um atacante remoto sem credenciais consegue acesso administrativo completo via HTTP(S) com requests especialmente construídos.
Post summary
CVE‑2024‑14034 is an authentication bypass flaw in Hirschmann HiEOS devices that allows remote attackers to obtain full admin access through crafted HTTP(S) requests. No exploit code, patch, or evidence of active exploitation is mentioned.
🚨 CVE-2024-14034: Hirschmann HiEOS Authentication ... Remote admin takeover on industrial switches via malformed HTTP requests - perfect OT pivot point for APTs targeting cr... https://zerodaysignal.com/vulnerability/CVE-2024-14034 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The tweet alerts to CVE-2024-14034, describing a remote admin takeover via malformed HTTP requests on Hirschmann HiEOS switches, highlighting its potential as an OT pivot point for APTs without indicating confirmed exploitation, patch, or PoC details.