This portal offers proactive reports and updates of potential vulnerabilities regarding firmware versions of HW5.
Furthermore, it serves as a centre where our customers can report possible vulnerabilities.
This enables us to process the request as quickly as possible.

Report Vulnerability:
OpenSSL – 05.03.2026
OpenSSL Remote Code Execution and Denial-Of-Service Vulnerability
Blast-RADIUS – 15.12.2025
Blast-RADIUS Protocol Spoofing Vulnerability
SSH – 31.05.2023
SSH Protocol Authentication Bypass Vulnerability
Spring4Shell – 07.04.2022
Spring4Shell vulnerability
APACHE log4j – 13.12.2021
APACHE log4j Vulnerability
Apache httpd – 08.11.2021
Apache webserver “httpd” vulnerability
INFRA HALT – 02.09.2021
TCP IP STACK Vulnerabilities
NAME:WRECK – 19.07.2021
Vulnerabilities in DHCP/DNS implementation of TCP/IP Network Stacks
Aginode AMNESIA:33 – 18.12.2020
Aginode switches and AMNESIA:33 Vulnerabilities in TCP/IP Network Stacks
Aginode BootHole – 31.07.2020
Aginode switches and UEFI SecureBoot vulnerability
Aginode Ripple 20 – 26.06.2020
Aginode switches and Ripple 20 Vulnerability in Treck TCP/IP Network Stack
Armis Interpeak IPNet TCP/IP – 16.10.2019
The Armis research team, Armis Labs, have identified critical vulnerabilities in the network stack Interpeak IPNet TCP/IP.
Armis VxWorks – 21.08.2019
The Armis research team, Armis Labs, have discovered 11 zero-day vulnerabilities in VxWorks.
Spectre & Meltdown – 01.08.2018
Vulnerability that could let attackers read sensitive information that should never leave the CPU, or central processing unit.
httpoxy – 02.08.2016
Set of vulnerabilities that affect application code running in CGI, or CGI-like environments.
glibc DNS – 01.03.2016
The glibc DNS client-side resolver is vulnerable to a stack-based buffer overflow when the getaddrinfo() library function is used.
OpenSSH – 25.01.2016
The OpenSSH client code between 5.4 and 7.1 contains experimental support for resuming SSH-connections (roaming).
POODLE attack (Padding Oracle On Downgraded Legacy Encryption) – 22.10.2014
Man-in-the-middle exploit which takes advantage of a clients’ fallback to SSL 3.0.
FREAK (Factoring RSA Export Keys) – 17.04.2014
Security exploit of a cryptographic weakness in the SSL/TLS protocols.
Heartbleed Vulnerability – 17.04.2014
Results from a missing bound check in the handling of the Transport Layer Security (TLS) heartbeat extension.