Read the docs
TI-2022-04573 Aliases CVE-2022-4986GHSA-fx2x-5jph-mxxh

Hirschmann EagleSDV Denial of Service via TLS

Priority MEDIUM 44CWE-400Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-400.

Summary

Hirschmann EagleSDV version 05.4.01 prior to 05.4.02 contains a denial-of-service vulnerability that causes the device to crash during session establishment when using TLS 1.0 or TLS 1.1. Attackers can trigger a crash by initiating TLS connections with these protocol versions to disrupt service availability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00455 39th percentileScored 2026-11-07
Fix Fixed Hirschmann EagleSDV (Belden): 05.4.02

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
BeldenHirschmann EagleSDVup to 05.4.0105.4.02Patch availableCNA
  • Hirschmann EagleSDV VendorBelden Affected up to 05.4.01 Fixed in 05.4.02 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:beldan:eaglesdv_firmware:*:*:*:*:*:*:*:*before 05.4.02VulnerableBeldan
cpe:2.3:h:beldan:eaglesdv:-:*:*:*:*:*:*:*not specified by NVDRunning onBeldan
  • cpe:2.3:o:beldan:eaglesdv_firmware:*:*:*:*:*:*:*:* Versions before 05.4.02 Vulnerable ·Beldan
  • cpe:2.3:h:beldan:eaglesdv:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Beldan

Remediation

  • Fix · CNA Hirschmann EagleSDV (Belden) Fixed in 05.4.02

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-4986
  2. 2026-10-03 Alias added: GHSA-fx2x-5jph-mxxh

References

Advisory 1

  • TI-2019-09143 Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). CVSS 3.1CRITICAL 9.8
  • TI-2019-09145 Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. CVSS 3.1HIGH 8.8
  • TI-2022-19123 The web server of Hirschmann BAT-C2 before 09.13.01.00R04 allows authenticated command… CVSS 3.1HIGH 8.8
  • TI-2019-09144 Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. CVSS 3.1CRITICAL 9.8
  • TI-2019-09148 Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). CVSS 3.1CRITICAL 9.8
  • TI-2025-43113 A stored cross-site scripting (XSS) vulnerability exists in the web management interface… CVSS 3.1MEDIUM 6.1
See all 49 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences