A heap overflow in the HiLCOS web interface of Hirschmann EagleSDV devices allows an unauthenticated remote attacker to send specially crafted requests and cause the device to crash. This results in a denial of service that disrupts network operations. The weakness is a classic buffer overflow, identified as CWE-400. The impact is local service disruption; compromised devices cannot be reliably used until rebooted or patched.

The vulnerability affects a range of Belden Hirschmann EagleSDV products including BAT‑R, BAT‑F, BAT450‑F, BAT867‑R, BAT867‑F, WLC, and the BAT Controller Virtual, covering both physical devices and virtual controllers. No specific firmware or software version numbers are listed in the advisory, so all variants that deploy the HiLCOS web interface should be considered at risk.

The CVSS score of 8.7 indicates a high severity, while the EPSS score of less than 1% suggests a low likelihood of exploitation in the wild at this time. The vulnerability is not currently catalogued in CISA’s KEV list. Exploitation requires no authentication and can be performed from any network location that can reach the HiLCOS service, making the attack vector remote and easily discoverable by adversaries with network access.