Dashboard / CVE-2025-15620

CVE-2025-15620

HIGH
MEDIUM Priority: 0.04 BB Relevance: 77/100
Published: 2026-04-02 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Scope Change

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Changed
C: None
I: None
A: High

Description

HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerability in the web interface that allows remote attackers to reboot the affected device by sending a malicious HTTP GET request to a specific endpoint. Attackers can trigger an uncontrolled reboot condition through crafted HTTP requests to cause service disruption and unavailability of the switch.

Weakness Classification (1)

Affected Software (5)

VendorProductVersion
Belden Hirschmann HiOS Switch Platform 09.1.00 < 09.4.05
Belden Hirschmann HiOS Switch Platform 10.0.00 < 10.3.01
Belden Hirschmann HiOS Switch Platform 09.1.00 < 09.4.05
Belden Hirschmann HiOS Switch Platform 10.0.00 < 10.3.01
belden hios_switch 09.1.00 – 09.4.05

References & Advisories (2)

Bug Bounty Relevance

77 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

8.6 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

EPSS — Exploitation Probability

0.51%
Raw Score 0.005110
Percentile 43.5%
Date 2026-10-29

Intelligence Sources

mitre ref →
nvd ref →

External Links