Vulnerability Details CVE-2022-4986
Hirschmann EagleSDV version 05.4.01 prior to 05.4.02 contains a denial-of-service vulnerability that causes the device to crash during session establishment when using TLS 1.0 or TLS 1.1. Attackers can trigger a crash by initiating TLS connections with these protocol versions to disrupt service availability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 0.2%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2022-4986
-
cpe:2.3:h:beldan:eaglesdv:-
-
cpe:2.3:o:beldan:eaglesdv_firmware:*