Improper Authorization Vulnerability in Hirschmann Industrial HiVision

CVE-2017-20238

What is CVE-2017-20238?

The vulnerability affects specific versions of Hirschmann Industrial HiVision, where read-only users can exploit a lack of proper authorization to gain write access to managed devices. By bypassing the access control mechanisms, attackers can alter device configurations via alternative interfaces, such as the web interface or SNMP browser, undermining the intended security measures and potentially leading to unauthorized changes in critical device settings.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References