Firewall Filtering Vulnerability in Hirschmann HiLCOS Products Affecting IPv4 Multicast Traffic

CVE-2017-20233

What is CVE-2017-20233?

The vulnerability in Hirschmann HiLCOS products allows attackers to bypass security filter rules concerning IPv4 multicast and broadcast traffic. When the management IP address filtering feature is disabled, the firewall may fail to adequately restrict multicast and broadcast traffic, resulting in potential packet injection and interception by unauthorized network individuals. This flaw puts configurations at risk, as attackers with access can observe or manipulate sensitive data that is not properly filtered.

References