CVE-2017-20238
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
A vulnerability in Hirschmann Industrial HiVision versions 06.0.00 and 07.0.00 prior to 06.0.06 and 07.0.01 allows read-only users to gain write access to managed devices by bypassing access control mechanisms. Attackers can exploit alternative interfaces such as the web interface or SNMP browser to modify device configurations.
Risk Assessment
The risk is that unauthorized users can modify network device configurations, potentially leading to network integrity breaches, unauthorized access, or service disruptions.
Recommendation
It is recommended to immediately update Hirschmann Industrial HiVision to version 06.0.06 or 07.0.01, which fix this vulnerability. Additionally, restrict access to management interfaces to trusted networks only.
Other vulnerabilities in Hirschmann Industrial HiVision
See all- CVE-2017-20237Critical
An authentication bypass vulnerability in Hirschmann Industrial HiVision prior to versions 06.0.07 and 07.0.03 allows unauthenticated remote attackers to execute arbitrary commands with administrative privileges via the master service.
- CVE-2022-4987High
Hirschmann Industrial HiVision versions 08.1.03 prior to 08.1.04 and 08.2.00 contain a vulnerability in the execution of user-configured external applications. A local attacker can place a malicious binary in the execution path, leading to arbitrary code execution with elevated privileges.
- CVE-2023-7343High
An arbitrary code execution vulnerability in Hirschmann Industrial HiVision versions 05.0.00 through 08.3.01 prior to 08.3.02. An attacker can exploit it when an administrator opens a maliciously crafted project file. Code execution occurs in the context of the HiVision process.
Original NVD description (English source)
Hirschmann Industrial HiVision versions 06.0.00 and 07.0.00 prior to 06.0.06 and 07.0.01 contains an improper authorization vulnerability that allows read-only users to gain write access to managed devices by bypassing access control mechanisms. Attackers can exploit alternative interfaces such as the web interface or SNMP browser to modify device configurations despite having restricted permissions.