Firewall Bypass Vulnerability in Hirschmann HiLCOS OpenBAT and BAT450 Products

CVE-2021-4477

What is CVE-2021-4477?

Hirschmann HiLCOS OpenBAT and BAT450 products contain a vulnerability that enables a firewall bypass specifically within IPv6 IPsec deployments. This flaw allows attackers to establish IPv6 IPsec connections (using either IKEv1 or IKEv2) while utilizing an IPv6 Internet connection, which leads to the circumvention of configured firewall rules. As a result, malicious traffic from VPN connections can access the network without proper enforcement of firewall policies, exposing systems to potential attacks.

References