The vulnerability resides in the HTTP(S) management module of Hirschmann HiEOS devices and permits any remote attacker, without credentials, to bypass authentication. By sending specially crafted requests, an attacker can obtain full administrative privileges, download or upload device configuration, and modify firmware. This effectively allows any remote code or configuration change, compromising the integrity and availability of the device.

All Hirschmann HiEOS LRS11 devices running firmware versions earlier than 01.1.00 are affected. The vulnerability is tied to the vendor product identified as Belden:Hirschmann HiEOS LRS11.

The vulnerability carries a CVSS score of 9.3, indicating critical severity. No EPSS score is available, and the issue is not listed in the CISA KEV catalog. Attackers can exploit the flaw over the network by accessing the HTTP(S) management interface, which is often exposed to management networks or the Internet. Because authentication is bypassed entirely, no additional credentials or privileges are required, making exploitation straightforward.