CVE-2026-89025: Improper Handling of Exceptional Conditions in Belden Hirschmann HiOS Switch Platform
Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTP(S) content. A remote unauthenticated attacker can send a specially crafted HTTP(S) request to a specific endpoint that is processed incorrectly, causing the device to perform an unintended reboot and resulting in a temporary denial-of-service condition. This vulnerability has been addressed in versions 07.1.12, 08.7.10, 09.0.13, 09.3.03, 10.3.08, and 10.5.00.
AI Analysis
Technical Summary
The Hirschmann HiOS Switch Platform contains a denial-of-service vulnerability due to missing validation of HTTP(S) content in its integrated web server. A remote unauthenticated attacker can exploit this by sending a specially crafted HTTP(S) request to a particular endpoint, which is processed incorrectly and triggers an unintended device reboot. This leads to a temporary denial-of-service condition. The vulnerability has been fixed in versions 07.1.12, 08.7.10, 09.0.13, 09.3.03, 10.3.08, and 10.5.00.
Potential Impact
Successful exploitation results in a temporary denial-of-service condition caused by an unintended reboot of the affected device. The attack requires no authentication and can be performed remotely over the network. This can disrupt network operations relying on the affected Hirschmann HiOS Switch Platform devices.
Mitigation Recommendations
A fix is available. Users should upgrade to versions 07.1.12, 08.7.10, 09.0.13, 09.3.03, 10.3.08, or 10.5.00 or later to remediate this vulnerability.
CVE-2026-89025: Improper Handling of Exceptional Conditions in Belden Hirschmann HiOS Switch Platform
Description
Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server due to missing validation of HTTP(S) content. A remote unauthenticated attacker can send a specially crafted HTTP(S) request to a specific endpoint that is processed incorrectly, causing the device to perform an unintended reboot and resulting in a temporary denial-of-service condition. This vulnerability has been addressed in versions 07.1.12, 08.7.10, 09.0.13, 09.3.03, 10.3.08, and 10.5.00.
CVSS v4.0
Score 8.7high
Affected software
Belden
Hirschmann HiOS Switch Platform
pkg:github/belden/hirschmann-hios-switch-platformRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Hirschmann HiOS Switch Platform contains a denial-of-service vulnerability due to missing validation of HTTP(S) content in its integrated web server. A remote unauthenticated attacker can exploit this by sending a specially crafted HTTP(S) request to a particular endpoint, which is processed incorrectly and triggers an unintended device reboot. This leads to a temporary denial-of-service condition. The vulnerability has been fixed in versions 07.1.12, 08.7.10, 09.0.13, 09.3.03, 10.3.08, and 10.5.00.
Potential Impact
Successful exploitation results in a temporary denial-of-service condition caused by an unintended reboot of the affected device. The attack requires no authentication and can be performed remotely over the network. This can disrupt network operations relying on the affected Hirschmann HiOS Switch Platform devices.
Mitigation Recommendations
A fix is available. Users should upgrade to versions 07.1.12, 08.7.10, 09.0.13, 09.3.03, 10.3.08, or 10.5.00 or later to remediate this vulnerability.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-09-10T16:23:54.471Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6aa956ec55bf5e2cf5f09474
Added to database: 09/15/2026, 14:32:12 UTC
Last enriched: 09/15/2026, 14:46:41 UTC
Last updated: 09/16/2026, 03:19:31 UTC
Views: 12
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.