PT-2026-30209 · Belden · Hirschmann Hios+1

CVE-2020-37216 · Published 2026-04-03 · Updated 2026-07-24

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions HiOS versions prior to 08.1.00 HiOS versions prior to 07.1.01

Description A denial of service issue exists in the EtherNet/IP stack due to improper handling of packet length fields. Remote attackers can cause the device to crash or hang by sending specially crafted UDP EtherNet/IP packets where the length value is larger than the actual packet size.

Recommendations Update to version 08.1.00 or later. Update to version 07.1.01 or later.

Fix

DoS

Untrusted Search Path

RCE

Weakness Enumeration

CWE-426

CWE-20

Related Identifiers

CVE-2020-37216

Affected Products

Hirschmann Hios

Hirschmann Industrial Hivision

References · 5

• https://assets.belden.com/m/3d3e2cbfa4860258/original/Belden-Security-Bulletin-BSECV-2019-14.pdf · Vendor Advisory
• https://vulncheck.com/advisories/hirschmann-industrial-hivision-untrusted-search-path-arbitrary-binary-execution · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-37216 · Security Note
• https://t.me/cveNotify/222491 · Telegram Post
• https://vulncheck.com/advisories/hirschmann-hios-ethernet-ip-stack-denial-of-service · Note