CVE-2017-20238
High
Description
Hirschmann Industrial HiVision versions 06.0.00 and 07.0.00 prior to 06.0.06 and 07.0.01 contains an improper authorization vulnerability that allows read-only users to gain write access to managed devices by bypassing access control mechanisms. Attackers can exploit alternative interfaces such as the web interface or SNMP browser to modify device configurations despite having restricted permissions.
SeverityHigh
CVSS7.1
Exploit probability—
ProductHirschmann Industrial HiVision
PublishedApr 3, 2026
First seenApr 3, 2026
Weakness typeCWE-285CWE-285
How to fix
Update
- Belden Hirschmann Industrial HiVision07.0.01 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Belden Hirschmann Industrial HiVision | 06.0.00 ≤ v ≤ 06.0.05, 07.0.00 ≤ v < 07.0.01 | 07.0.01 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.