Is CVE-2022-4986 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2022-4986 being exploited in the wild.

How severe is CVE-2022-4986?

High severity, with a CVSS score of 7.5, published 2 April 2026.

Which products and versions are affected?

Hirschmann EagleSDV 05.4.01 prior to 05.4.02.

Is there a fix for CVE-2022-4986?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2022-4986 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2022-4986?

Check whether you run Beldan Eaglesdv or Beldan Eaglesdv Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2022-4986: Hirschmann EagleSDV denial of service in TLS session establishment

CVE-2022-4986 · Severity: high · CVSS 7.5 · Published 2026-04-02

A security vulnerability exists in Hirschmann EagleSDV industrial security appliances. An attacker can cause the device to crash and stop functioning by attempting to connect using older, insecure encryption standards (TLS 1.0 or 1.1). This results in a denial of service, potentially disrupting industrial network traffic and security monitoring until the device is recovered.

Quick answers

Is CVE-2022-4986 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2022-4986 being exploited in the wild.
How severe is CVE-2022-4986?: High severity, with a CVSS score of 7.5, published 2 April 2026.
Which products and versions are affected?: Hirschmann EagleSDV 05.4.01 prior to 05.4.02.
Is there a fix for CVE-2022-4986?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2022-4986 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2022-4986?: Check whether you run Beldan Eaglesdv or Beldan Eaglesdv Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is classified as uncontrolled resource consumption (CWE-400) within the TLS implementation of Hirschmann EagleSDV firmware. Specifically, the device fails to properly handle session establishment requests when the client specifies TLS 1.0 or TLS 1.1 protocols, leading to a system crash. This is a network-reachable vulnerability that requires no authentication or user interaction to exploit. An attacker can repeatedly trigger this condition to maintain a denial-of-service state. The issue is resolved in firmware version 05.4.02.

Affected products

Hirschmann EagleSDV 05.4.01 prior to 05.4.02

Timeline

2026-04-02: disclosed: Initial disclosure by VulnCheck and Belden
2026-04-02: advisory: NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.