PT-2026-30210 · Belden · Hirschmann Industrial Hivision

CVE-2022-4987 · Published 2026-04-03 · Updated 2026-07-24

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hirschmann Industrial HiVision versions 08.1.03 through 08.1.03 Hirschmann Industrial HiVision version 08.2.00

Description Insufficient path sanitization during the execution of user-configured external applications allows a local attacker to execute arbitrary binaries. By placing a malicious binary in the execution path of a configured external application, the attacker can ensure their binary is executed instead of the intended one, potentially resulting in execution with elevated privileges.

Recommendations Update Hirschmann Industrial HiVision version 08.1.03 to version 08.1.04. Update Hirschmann Industrial HiVision version 08.2.00 to a newer version containing the fix.

Fix

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2022-4987

Affected Products

Hirschmann Industrial Hivision

References · 4

• https://assets.belden.com/m/62ae167036cb17c3/original/Microsoft-Word-Belden_Security_Bulletin_BSECV-2021-03_1v0-002-docx.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4987 · Security Note
• https://t.me/cveNotify/222492 · Telegram Post
• https://vulncheck.com/advisories/hirschmann-industrial-hivision-external-application-path-hijacking-leading-to-arbitrary-code-execution · Note