CVE-2025-15620
HiOS Switch Platform Denial-of-Service via Web Interface
CVSS Score
9.3
EPSS Score
0.0%
EPSS Percentile
1th
HiOS Switch Platform versions 09.1.00 prior to 09.4.05 and 10.3.01 contains a denial-of-service vulnerability in the web interface that allows remote attackers to reboot the affected device by sending a malicious HTTP GET request to a specific endpoint. Attackers can trigger an uncontrolled reboot condition through crafted HTTP requests to cause service disruption and unavailability of the switch.
| CWE | CWE-306 |
| Vendor | belden |
| Product | hirschmann hios switch platform |
| Published | Apr 2, 2026 |
| Last Updated | Apr 3, 2026 |
Stay Ahead of the Next One
Get instant alerts for belden hirschmann hios switch platform
Be the first to know when new critical vulnerabilities affecting belden hirschmann hios switch platform are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
None
Integrity
None
Availability
High
Affected Versions
Belden / Hirschmann HiOS Switch Platform
09.1.00 ≤ 09.4.05 10.0.00 ≤ 10.3.01