high7.5
CVE-2024-14033
Hirschmann EagleSDV firmware prior to 05.4.02 contains a denial-of-service vulnerability in TLS session establishment.
Impact
Hirschmann EagleSDV firmware prior to 05.4.02 contains a denial-of-service vulnerability in TLS session establishment. Attackers can crash the device during TLS handshake by exploiting protocol downgrades to TLS 1.0 or TLS 1.1, interrupting service availability.
Affected products
| Product | Affected versions |
|---|---|
| Hirschmann EagleSDV Firmware | before 05.4.02 |
Versions were read from the advisory text. No structured product data has been published for this record yet.