CVE-2022-4987
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Hirschmann Industrial HiVision versions 08.1.03 prior to 08.1.04 and 08.2.00 contain a vulnerability in the execution of user-configured external applications. A local attacker can place a malicious binary in the execution path, leading to arbitrary code execution with elevated privileges.
Risk Assessment
The risk is privilege escalation by a local attacker, potentially leading to full system compromise.
Recommendation
Upgrade Hirschmann Industrial HiVision to version 08.1.04 or later, which includes a fix for path sanitization.
Other vulnerabilities in Hirschmann Industrial HiVision
See all- CVE-2017-20237Critical
An authentication bypass vulnerability in Hirschmann Industrial HiVision prior to versions 06.0.07 and 07.0.03 allows unauthenticated remote attackers to execute arbitrary commands with administrative privileges via the master service.
- CVE-2017-20238High
A vulnerability in Hirschmann Industrial HiVision versions 06.0.00 and 07.0.00 prior to 06.0.06 and 07.0.01 allows read-only users to gain write access to managed devices by bypassing access control mechanisms. Attackers can exploit alternative interfaces such as the web interface or SNMP browser to modify device configurations.
- CVE-2023-7343High
An arbitrary code execution vulnerability in Hirschmann Industrial HiVision versions 05.0.00 through 08.3.01 prior to 08.3.02. An attacker can exploit it when an administrator opens a maliciously crafted project file. Code execution occurs in the context of the HiVision process.
Original NVD description (English source)
Hirschmann Industrial HiVision version 08.1.03 prior to 08.1.04 and 08.2.00 contains a vulnerability in the execution of user-configured external applications that allows a local attacker to execute arbitrary binaries. Due to insufficient path sanitization, an attacker can place a malicious binary in the execution path of a configured external application, causing it to be executed instead of the intended application. This can result in execution with elevated privileges depending on the context of the external application.