CVE-2025-15620: HiOS Switch Platform Denial-of-Service via Web Interface
HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerability in the web interface that allows remote attackers to reboot the affected device by sending a malicious HTTP GET request to a specific endpoint. Attackers can trigger an uncontrolled reboot condition through crafted HTTP requests to cause service disruption and unavailability of the switch.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15620?
CVE-2025-15620 is classified as a denial-of-service vulnerability.
How do I fix CVE-2025-15620?
To mitigate CVE-2025-15620, upgrade the HiOS Switch Platform to version 09.4.05 or later.
What versions of HiOS Switch Platform are affected by CVE-2025-15620?
CVE-2025-15620 affects HiOS Switch Platform versions 09.1.00 through 09.4.05 and specifically version 10.3.01.
Can CVE-2025-15620 allow remote attackers to disrupt service?
Yes, CVE-2025-15620 allows remote attackers to reboot the device through a malicious HTTP GET request.
What type of attack does CVE-2025-15620 facilitate?
CVE-2025-15620 facilitates a denial-of-service attack via the web interface of the HiOS Switch Platform.