PT-2026-29867 · Unknown · Hisecos Web Server

Published 2026-04-02 · Updated 2026-04-03 · CVE-2023-7342

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HiSecOS web server versions 03.4.00 through 04.0.99

Description HiSecOS web server versions 03.4.00 through 04.0.99 contain a privilege escalation flaw. Authenticated users with operator or auditor roles can escalate their privileges to the administrator role by sending specially crafted packets to the web server. Successful exploitation allows attackers to gain full administrative access to the affected device.

Recommendations Update HiSecOS web server to version 04.1.00 or later.

Fix

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2023-7342

Affected Products

Hisecos Web Server

References · 5

• https://assets.belden.com/m/4828b7cf8b652105/original/Microsoft-Word-Belden_Security_Bulletin_BSECV-2021-07_1v0-docx.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-7342 · Security Note
• https://twitter.com/CVEnew/status/2040128790693642277 · Twitter Post
• https://vulncheck.com/advisories/belden-hisecos-web-server-privilege-escalation · Note
• https://twitter.com/CveFindCom/status/2039828301854707730 · Twitter Post