CVE-2020-6994: Buffer Overflow
A buffer overflow vulnerability was found in some devices of Hirschmann Automation and Control HiOS and HiSecOS. The vulnerability is due to improper parsing of URL arguments. An attacker could exploit this vulnerability by specially crafting HTTP requests to overflow an internal buffer. The following devices using HiOS Version 07.0.02 and lower are affected: RSP, RSPE, RSPS, RSPL, MSP, EES, EES, EESX, GRS, OS, RED. The following devices using HiSecOS Version 03.2.00 and lower are affected: EAGLE20/30.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-6994?
CVE-2020-6994 is a buffer overflow vulnerability found in some devices of Hirschmann Automation and Control HiOS and HiSecOS.
How does CVE-2020-6994 affect the affected software?
CVE-2020-6994 affects Belden Hirschmann Hios and Belden Hirschmann Hisecos versions up to and including 07.0.02 and 03.2.00, respectively.
What is the severity of CVE-2020-6994?
CVE-2020-6994 has a severity rating of 9.8 (Critical).
How can an attacker exploit CVE-2020-6994?
An attacker can exploit CVE-2020-6994 by crafting specially crafted HTTP requests to overflow an internal buffer.
Where can I find more information about CVE-2020-6994?
You can find more information about CVE-2020-6994 at the following link: [https://www.us-cert.gov/ics/advisories/icsa-20-091-01](https://www.us-cert.gov/ics/advisories/icsa-20-091-01)