# CVE-2024-14033: Hirschmann EagleSDV and HiLCOS denial of service in TLS and Web Interface

Source: https://junglewise.ai/threats/cve-2024-14033-hirschmann-eaglesdv-and-hilcos-denial-of-service-in-tls-and-web  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-02. Updated: 2026-07-24  
License: CC BY 4.0 with a link back

CVE-2024-14033 · Severity: high · CVSS 7.5 · Published 2026-04-02

A vulnerability in Hirschmann industrial networking devices can allow an attacker to remotely crash the hardware, leading to a complete loss of network connectivity. These devices are typically used in industrial environments to manage secure data traffic; an exploit could disrupt manufacturing operations or critical infrastructure monitoring. The issue occurs when the device attempts to establish a secure connection, allowing an attacker to force a system failure without needing any login credentials.

Vendors: [Hirschmann](https://junglewise.ai/threats/vendors/hirschmann).

## Quick answers

**Is CVE-2024-14033 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2024-14033 being exploited in the wild.

**How severe is CVE-2024-14033?** High severity, with a CVSS score of 7.5, published 2 April 2026.

**Which products and versions are affected?** Hirschmann HiLCOS 10.34.6313 to 10.34.6464.

**Is there a fix for CVE-2024-14033?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2024-14033 attacked?** It is attacked over the network, in device firmware.

**Am I affected by CVE-2024-14033?** Check whether you run Hirschmann HiLCOS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability manifests as a denial-of-service (DoS) condition during the TLS handshake process or via the HiLCOS web interface. In EagleSDV firmware, the crash is triggered by exploiting protocol downgrades to TLS 1.0 or 1.1 during session establishment. In other HiLCOS-based products (such as the BAT series), the issue is identified as a heap-based buffer overflow (CWE-122) within the web interface, particularly when the 'Public Spot' functionality is enabled. An unauthenticated remote attacker can trigger these crashes by sending specially crafted network requests, resulting in a device reboot or service interruption. The vulnerability is addressed in EagleSDV firmware version 05.4.02 and HiLCOS version 10.34.6464.

## Affected products

- Hirschmann (Belden) EagleSDV prior to 05.4.02
- Hirschmann (Belden) HiLCOS (BAT-R, BAT-F, BAT450-F, BAT867-R, BAT867-F, WLC, BAT Controller Virtual) 10.34.6313 to 10.34.6464

## Timeline

- 2026-04-02: disclosed
- 2026-04-02: advisory

## References

- [https://assets.belden.com/m/774d24c02be5c220/original/Belden_Security_Bulletin_BSECV-2024-16.pdf](https://assets.belden.com/m/774d24c02be5c220/original/Belden_Security_Bulletin_BSECV-2024-16.pdf)
- [https://www.vulncheck.com/advisories/hirschmann-industrial-it-hilcos-heap-overflow-dos](https://www.vulncheck.com/advisories/hirschmann-industrial-it-hilcos-heap-overflow-dos)