PT-2026-29891 · Belden · Hirschmann Industrial Hivision

Published 2026-04-02 · Updated 2026-04-02 · CVE-2023-7343

Mitre

CVSS v3.1

7.8

High

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

HiSecOS web server versions 05.0.00 to 08.3.01 prior to 08.3.02 contains a privilege escalation vulnerability that allows authenticated users with operator or auditor roles to escalate privileges to the administrator role by sending specially crafted packets to the web server. Attackers can exploit this flaw to gain full administrative access to the affected device.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2023-7343

Affected Products

Hirschmann Industrial Hivision

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2023-7343 · Security Note
• https://assets.belden.com/m/774e2db2b0100bc1/original/Belden-Security-Bulletin-BSECV-2023-06.pdf · Vendor Advisory