Read the docs
TI-2020-19351 Aliases CVE-2020-37216GHSA-m685-jgfp-vmx9

Hirschmann HiOS EtherNet/IP Stack Denial of Service

Priority MEDIUM 45CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Hirschmann HiOS devices versions prior to 08.1.00 and 07.1.01 contain a denial of service vulnerability in the EtherNet/IP stack where improper handling of packet length fields allows remote attackers to crash or hang the device. Attackers can send specially crafted UDP EtherNet/IP packets with a length value larger than the actual packet size to render the device inoperable.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00937 61st percentileScored 2026-11-07
Fix Fixed Hirschmann HiOS (Belden): >= 08.1.00, >= 07.1.01

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
BeldenHirschmann HiOS05.00.00 – 08.0.00>= 08.1.00, >= 07.1.01Patch availableCNA
  • Hirschmann HiOS VendorBelden Affected 05.00.00 – 08.0.00 Fixed in >= 08.1.00, >= 07.1.01 Patch available CNA

Remediation

  • Fix · CNA Hirschmann HiOS (Belden) Fixed in >= 08.1.00, >= 07.1.01

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-37216
  2. 2026-10-03 Alias added: GHSA-m685-jgfp-vmx9

References

Advisory 1

  • TI-2019-09143 Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). CVSS 3.1CRITICAL 9.8
  • TI-2019-09145 Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. CVSS 3.1HIGH 8.8
  • TI-2022-19123 The web server of Hirschmann BAT-C2 before 09.13.01.00R04 allows authenticated command… CVSS 3.1HIGH 8.8
  • TI-2019-09144 Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. CVSS 3.1CRITICAL 9.8
  • TI-2019-09148 Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). CVSS 3.1CRITICAL 9.8
  • TI-2025-43113 A stored cross-site scripting (XSS) vulnerability exists in the web management interface… CVSS 3.1MEDIUM 6.1
See all 49 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences