Improper Authorization Vulnerability in Hirschmann Industrial HiVision

CVE-2017-20238

What is CVE-2017-20238?

The vulnerability affects specific versions of Hirschmann Industrial HiVision, where read-only users can exploit a lack of proper authorization to gain write access to managed devices. By bypassing the access control mechanisms, attackers can alter device configurations via alternative interfaces, such as the web interface or SNMP browser, undermining the intended security measures and potentially leading to unauthorized changes in critical device settings.

References