A critical authentication bypass vulnerability (CVE-2024-14034) exists in Hirschmann HiEOS devices' HTTP(S) management module. The vulnerability allows unauthenticated remote attackers to gain administrative access by sending specially crafted HTTP(S) requests. Attackers can exploit improper authentication handling to obtain elevated privileges and perform unauthorized actions including configuration download or upload and firmware modification. This affects the management interface of industrial network devices manufactured by Hirschmann.