Home

Description

Hirschmann Industrial IT products (BAT-R, BAT-F, BAT450-F, BAT867-R, BAT867-F, WLC, BAT Controller Virtual) contain a heap overflow vulnerability in the HiLCOS web interface that allows unauthenticated remote attackers to trigger a denial-of-service condition by sending specially crafted requests to the web interface. Attackers can exploit this heap overflow to crash the affected device and cause service disruption, particularly in configurations where the Public Spot functionality is enabled.

PUBLISHED Reserved 2026-04-01 | Published 2026-04-02 | Updated 2026-05-14 | Assigner VulnCheck




HIGH: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

HIGH: 8.7CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-400: Uncontrolled Resource Consumption

Product status

Default status
unaffected

05.4.02 (custom)
unaffected

Any version before 05.4.01
affected

References

assets.belden.com/...den_Security_Bulletin_BSECV-2024-16.pdf vendor-advisory

www.vulncheck.com/...-industrial-it-hilcos-heap-overflow-dos third-party-advisory

cve.org (CVE-2024-14033)

nvd.nist.gov (CVE-2024-14033)

Download JSON