The vulnerability in the HiOS Switch Platform web interface allows a remote attacker to send a malicious HTTP GET request to a specific endpoint, causing the device to reboot. Because the endpoint does not perform authentication, the request is accepted and leads to an uncontrolled reboot that disrupts service. This represents Missing Authentication for a Critical Function (CWE‑306) and results in denial of service.

Affected products are the Belden Hirschmann HiOS Switch Platform. Versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain the flaw. Firmware releases 09.4.05 and later, and any newer 10.3.x releases, are not susceptible.

With a CVSS score of 9.2, the vulnerability is considered critical. An attacker can exploit it by sending a malicious HTTP GET request over the network to the vulnerable endpoint, with no credentials required. The EPSS score is < 1%, indicating a very low probability of exploitation in the wild, yet the high severity underlines that any network exposed to the switch’s web interface is at risk of abrupt service disruption. Timely patching or network segmentation is essential to mitigate potential downtime.