Critical ICSA-20-091-01 1 CVE

Hirschmann Automation and Control HiOS and HiSecOS Products

Published Mar 31, 2020 · Updated Mar 31, 2020

Vendor: Hirschmann Automation and Control GmbH, Belden Product: EAGLE20/30 Product: RSP RSPE RSPS RSPL MSP EES EES EESX GRS OS RED

Summary

Successful exploitation of this vulnerability could allow an unauthenticated, remote attacker to overflow a buffer and fully compromise the device.

Vulnerabilities 1

Unscored —

CVE-2020-6994

A buffer overflow vulnerability was found in some devices of Hirschmann Automation and Control HiOS and HiSecOS. The vu…

Hirschmann Automation and Control GmbH, a division of Belden HiSecOS for device EAGLE20/30 HiOS for the following devices RSP, RSPE, RSPS, RSPL, MSP, EES, EES, EESX, GRS, OS, RED

Apr 3, 2020

Revision history

2020-03-31 #1
ICSA-20-091-01 Hirschmann Automation and Control HiOS and HiSecOS Products

References

ICS Advisory ICSA-20-091-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-091-01
Recommended Practices
https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B