Privilege Escalation Vulnerability in HiSecOS Web Server by Belden

CVE-2023-7342

What is CVE-2023-7342?

The HiSecOS web server is susceptible to a privilege escalation vulnerability that allows authenticated users, specifically those with operator or auditor roles, to gain elevated access to the administrator role. By sending specially crafted packets to the web server, an attacker can exploit this security flaw, potentially leading to unauthorized administrative control over affected devices. This vulnerability underscores the importance of timely updates and robust security practices to mitigate risks.

References