VORANT. Threat Intelligence Research Create a free account

Belden HiOS Switch DoS Vulnerability Disclosed

Published Vorant ratingroutine vulnerability InfrastructureManufacturing

Vorant's rating weighs the evidence in the report: confirmed exploitation, victims claimed, CVSS and EPSS, and how many sources agree. It rates the report, not your assets.

ANSSI advisory warns of a remote denial-of-service flaw in Belden HiOS Switch Platform firmware across multiple version branches.

Sourcecert.ssi.gouv.fr — open the original

What to check

Applies to
Whether this concerns you is not assessed; the names the report mentions are listed below.

ANSSI (CERT-FR) issued an advisory relaying a Belden PSIRT security bulletin describing a vulnerability in the HiOS Switch Platform, an industrial network switch firmware used in operational technology and industrial control environments. The flaw allows a remote attacker to trigger a denial-of-service condition, potentially disrupting network switching functionality on affected devices. No CVE identifier was provided in this advisory, and no indication of active exploitation was given.

The vulnerability affects a broad range of HiOS firmware versions across the 07.x, 08.x, 09.0.x, 09.3.x, 10.3.x, and 10.5.x branches, all prior to specific patched releases. Given HiOS's use in industrial and infrastructure networking equipment, organizations operating Belden switches should consult the vendor's PSIRT bulletin and apply the corresponding firmware updates to mitigate the risk of service disruption.

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1126

Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.

What this brief leaves out

This page is the free tier: the write-up, the severity, the names. The paid plans add the security research and news reporting the free tier leaves out.

It sits in a corpus of 16,433 reports from 149 sources, 661 of them written in the last seven days, and it grows through the day.

A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.

Create a free account   What it costs