CVE-2024-14033: Hirschmann EagleSDV Denial of Service via TLS

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-04-02 · updated 2026-07-24
Weakness: CWE-400

Description

Hirschmann EagleSDV firmware prior to 05.4.02 contains a denial-of-service vulnerability in TLS session establishment. Attackers can crash the device during TLS handshake by exploiting protocol downgrades to TLS 1.0 or TLS 1.1, interrupting service availability.

Affected products

Belden Hirschmann EagleSDV: before 05.4.01 — fixed in 05.4.01

How to fix

Upgrade to a fixed version: Belden Hirschmann EagleSDV 05.4.01. Check the vendor advisory for mitigations.

References

https://assets.belden.com/m/774d24c02be5c220/original/Belden_Security_Bulletin_BSECV-2024-16.pdf
https://www.vulncheck.com/advisories/hirschmann-industrial-it-hilcos-heap-overflow-dos

Get alerted when CVE-2024-14033 or the next vulnerability affects your stack