CVE-2024-14033CWE-400
Hirschmann EagleSDV Denial of Service via TLS
High · published April 2, 2026
What it is
Hirschmann EagleSDV firmware prior to 05.4.02 contains a denial-of-service vulnerability in TLS session establishment. Attackers can crash the device during TLS handshake by exploiting protocol downgrades to TLS 1.0 or TLS 1.1, interrupting service availability.
The record
Technical detail
- CVSS v4.0
- 8.7 · HIGH
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
- EPSS
- 0.00430 · 36.2th percentile
- Weakness
- CWE-400 · Uncontrolled Resource Consumption
- Published
- 2026-04-02T20:40Z
EPSS history
Timeline