CVE-2022-4986

Hirschmann EagleSDV Denial of Service via TLS

Published Apr 2, 2026 CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Description

Hirschmann EagleSDV version 05.4.01 prior to 05.4.02 contains a denial-of-service vulnerability that causes the device to crash during session establishment when using TLS 1.0 or TLS 1.1. Attackers can trigger a crash by initiating TLS connections with these protocol versions to disrupt service availability.

Analysis

Technical impact

A flaw in the EagleSDV firmware causes a crash when a TLS 1.0 or TLS 1.1 handshake is attempted during session setup. The resulting denial-of-service blocks device management and normal operation, compromising availability for users who rely on the device for logging and control. The weakness corresponds to uncontrolled resource consumption triggered without authentication.

Affected Systems

Belden Hirschmann EagleSDV devices running firmware version 05.4.01 or earlier. Versions 05.4.02 and later contain the fix. All networked units that accept TLS connections are affected.

Risk and Exploitability

The CVSS base score of 8.7 indicates a high severity. The EPSS score is less than 1%, suggesting a low probability of widespread exploitation, and the vulnerability is not listed in the CISA KEV catalog. Nonetheless, an attacker with network access can trigger the crash by initiating a TLS 1.0 or TLS 1.1 connection, so the attack vector is remote and does not require privileged credentials.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Belden

Hirschmann EagleSDV

unaffected

Version	Status	Constraints
`0`	affected	≤ 05.4.01
`05.4.02`	unaffected	—

Configuration 1 [-]

AND

cpe:2.3:o:beldan:eaglesdv_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:beldan:eaglesdv:-:*:*:*:*:*:*:*

No data.

Vendor Product Versions

Belden

Hirschmann Eaglesdv

Version	Status	Scheme	Platform
`[05.4.01,05.4.02]`	unaffected	semver	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade the device firmware to version 05.4.02 or later.
Disable support for TLS 1.0 and TLS 1.1 on the device if a firmware upgrade is not immediately possible.
Monitor device logs for unexpected crashes to confirm the issue is resolved.

Generated by OpenCVE AI on May 12, 2026 at 23:04 UTC.

Tracking

Advisories

No advisories available

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.455% probability within 30 days)

Exploitation none

Automatable yes

Technical Impact partial

References

Link	Providers
https://assets.belden.com/m/1c8fe5d916567af6/original/Belden_Security_Bulletin_BSECV-2022-08.pdf
https://www.vulncheck.com/advisories/hirschmann-eaglesdv-denial-of-service-via-tls

History

Jun 2, 2026 5:45 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Beldan Beldan eaglesdv Beldan eaglesdv Firmware
CPEs		cpe:2.3:h:beldan:eaglesdv:-:::::::* cpe:2.3:o:beldan:eaglesdv_firmware::::::::
Vendors & Products		Beldan Beldan eaglesdv Beldan eaglesdv Firmware

May 12, 2026 9:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics	cvssV4_0 `{'score': 7.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}`	cvssV4_0 `{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}`

Apr 4, 2026 12:00 AM References updated View changes

Type	Values Removed	Values Added
References	https://www.belden.com/security

Apr 3, 2026 10:45 PM Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
References		https://assets.belden.com/m/1c8fe5d916567af6/original/Belden_Security_Bulletin_BSECV-2022-08.pdf https://www.vulncheck.com/advisories/hirschmann-eaglesdv-denial-of-service-via-tls
Metrics	cvssV4_0 `{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}`	cvssV4_0 `{'score': 7.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}`

Apr 3, 2026 2:00 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Apr 3, 2026 10:15 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Belden Belden hirschmann Eaglesdv
Vendors & Products		Belden Belden hirschmann Eaglesdv

Apr 2, 2026 11:00 PM Description updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description	Hirschmann EagleSDV contains a denial-of-service vulnerability that causes the device to crash during session establishment when using TLS 1.0 or TLS 1.1. Attackers can trigger a crash by initiating TLS connections with these protocol versions to disrupt service availability.	Hirschmann EagleSDV version 05.4.01 prior to 05.4.02 contains a denial-of-service vulnerability that causes the device to crash during session establishment when using TLS 1.0 or TLS 1.1. Attackers can trigger a crash by initiating TLS connections with these protocol versions to disrupt service availability.
Metrics	cvssV4_0 `{'score': 7.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}`	cvssV4_0 `{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}`

Apr 2, 2026 9:45 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Hirschmann EagleSDV contains a denial-of-service vulnerability that causes the device to crash during session establishment when using TLS 1.0 or TLS 1.1. Attackers can trigger a crash by initiating TLS connections with these protocol versions to disrupt service availability.
Title		Hirschmann EagleSDV Denial of Service via TLS
Weaknesses		CWE-400
References		https://www.belden.com/security
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}` cvssV4_0 `{'score': 7.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}`