Hirschmann HiLCOS OpenBAT BAT450 IPv6 IPsec Firewall Bypass

9.3 CVSS

Vulnerability Description

Hirschmann HiLCOS OpenBAT and BAT450 products contain a firewall bypass vulnerability in IPv6 IPsec deployments that allows traffic from VPN connections to bypass configured firewall rules. Attackers can exploit this vulnerability by establishing IPv6 IPsec connections (IKEv1 or IKEv2) while simultaneously using an IPv6 Internet connection to circumvent firewall policy enforcement.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-4477

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Belden

View All →

CVE-2025-15620

HiOS Switch Platform Denial-of-Service via Web Interface

Critical 9.2

CVE-2024-14034

Hirschmann HiEOS Authentication Bypass via HTTP Management Module

Critical 9.3

CVE-2024-14033

Hirschmann EagleSDV Denial of Service via TLS

High 8.7

CVE-2023-7343

Belden Industrial HiVision Arbitrary Code Execution via Malicious Project File

High 8.5

CVE-2023-7342

Belden HiSecOS Web Server Privilege Escalation

High 8.7

Affected Vendor

Belden

View all reports →

Affected Software

Hirschmann HiLCOS OpenBAT

Vulnerable Versions:

3.80-REL, 8.90-REL, 9.00-REL, 9.00-RU1, 9.10-REL, 9.12-REL, 9.12-RU1, 9.12-RU2, 9.12-RU3, 9.12-RU4, 9.12-RU5, 9.12-RU6, 9.12-RU7, 9.12-RU8, 9.12-RU9, 9.13-REL, 9.13-RU1, 10.12-REL, 10.12-RU1, 10.12-RU2