Security Advisories
Hillstone Network Security Advisories
Hillstone Networks Product Security Incident Response Team (PSIRT) is responsible for receiving, assessing, and publicly disclosing security vulnerabilities affecting Hillstone products and services. As the company’s official vulnerability disclosure channel, Hillstone Networks PSIRT is dedicated to protecting customers and partners through responsible disclosure practices and by ensuring compliance with applicable laws and regulations in the management and remediation of product security issues.
Hillstone Products Activation Logic Vulnerability
Advisory IDSeverityRelease DateReported ByCVE IDHSVD-2025-0051HighOctober 31, 2025External submissionN/A Overview Hillstone Products Activation Logic Vulnerability. The vulnerability is caused by the system's failure to fully verify the activation code data. Attackers...
Hillstone HSM Remote Command Execution Vulnerability
Advisory IDSeverityRelease DateReported ByCVE IDHSVD-2025-0046HighSeptember 19, 2025External submissionN/A Overview Hillstone HSM Remote Command Execution Vulnerability. The vulnerability is due to the fact that the system does not effectively filter the user's input...
Hillstone Products Privilege Escalation Vulnerability
Advisory IDSeverityRelease DateReported ByCVE IDHSVD-2025-0050HighAugust 26, 2025External submissionN/A Overview Hillstone Products Privilege Escalation Vulnerability. This vulnerability is caused by authentication logic defects in the system. Attackers with low...
Hillstone HSM Multiple Backend Unauthenticated Arbitrary File Read Vulnerabilities
Advisory IDSeverityRelease DateReported ByCVE IDHSVD-2025-0043HighAugust 12, 2025External submissionN/A Overview Hillstone HSM Multiple Backend Unauthenticated Arbitrary File Read Vulnerabilities. These vulnerabilities are due to the system's failure to restrict the...
Hillstone HSM Multiple Backend Arbitrary File Read Vulnerabilities
Advisory IDSeverityRelease DateReported ByCVE IDHSVD-2025-0042MediumAugust 12, 2025External submissionN/A Overview Hillstone HSM Multiple Backend Arbitrary File Read Vulnerabilities. These vulnerabilities are due to the system's failure to limit the path location of...
Hillstone HSM offline Interface XXE Vulnerability
Advisory IDSeverityRelease DateReported ByCVE IDHSVD-2025-0041MediumJuly 03, 2025External submissionN/A Overview Hillstone HSM offline Interface XXE Vulnerability. The vulnerability is that the system does not strictly filter the XML data incoming from users,...
Hillstone HSM write-sn Interface XXE Vulnerability
Advisory IDSeverityRelease DateReported ByCVE IDHSVD-2025-0040MediumJuly 03, 2025External submissionN/A Overview Hillstone HSM write-sn Interface XXE Vulnerability. The vulnerability is that the system does not strictly filter the XML data incoming from users,...
Hillstone HSA Arbitrary File Read Vulnerability
Advisory IDSeverityRelease DateReported ByCVE IDHSVD-2025-0014MediumApril 29, 2025External submissionN/A Overview Hillstone HSA Arbitrary File Read Vulnerability. The vulnerability is due to the fact that the system does not limit the path location of the requested...
Hillstone HSA Command Injection Vulnerability
Advisory IDSeverityRelease DateReported ByCVE IDHSVD-2025-0028HighApril 29, 2025External submissionN/A Overview Hillstone HSA Command Injection Vulnerability. This vulnerability is due to the fact that the system does not effectively filter the user's input and...
Hillstone HSA Command Injection Vulnerability
Advisory IDSeverityRelease DateReported ByCVE IDHSVD-2025-0025HighApril 29, 2025External submissionN/A Overview Hillstone HSA Command Injection Vulnerability. This vulnerability is due to the fact that the system does not effectively filter the user's input and...
For the 4th year in a row, Hillstone Networks has been recognized in Gartner Peer Insights Customers’ Choice for Network Firewalls.
The Customers’ Choice is a rating of vendors in a given market — for Hillstone, it’s Network Firewalls — that take into account both the number of reviews and the overall user rating. Based on feedback and ratings from our end users who have purchased, implemented and are happily using our products and services, Hillstone’s overall rating came to 4.9.
