CVE-2022-4986
Analyzed
Analyzed - Analysis Complete
Denial-of-Service in Hirschmann EagleSDV via TLS 1.0/1.1 Sessions
Publication date: 2026-04-02
Last updated on: 2026-06-02
Assigner: VulnCheck
Description
Description
Hirschmann EagleSDV version 05.4.01 prior to 05.4.02 contains a denial-of-service vulnerability that causes the device to crash during session establishment when using TLS 1.0 or TLS 1.1. Attackers can trigger a crash by initiating TLS connections with these protocol versions to disrupt service availability.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| beldan | eaglesdv_firmware | to 05.4.02 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-400 | The product does not properly control the allocation and maintenance of a limited resource. |