CVE-2020-37216CWE-20

Hirschmann HiOS EtherNet/IP Stack Denial of Service

High · published April 3, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
59.9
In the wild
Unconfirmed
What it is

Hirschmann HiOS devices versions prior to 08.1.00 and 07.1.01 contain a denial of service vulnerability in the EtherNet/IP stack where improper handling of packet length fields allows remote attackers to crash or hang the device. Attackers can send specially crafted UDP EtherNet/IP packets with a length value larger than the actual packet size to render the device inoperable.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00921 · 59.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-04-03T20:19Z
EPSS history
Timeline
  • 03 APR 20:19Z
    Hirschmann HiOS EtherNet/IP Stack Denial of Service
    cvelistv5