PT-2026-30261 · Undefined · Undefined

CVE-2017-20238 · Published 2026-04-03 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions Hirschmann Industrial HiVision versions 06.0.00 through 06.0.05 Hirschmann Industrial HiVision versions 07.0.00 through 07.0.00

Description An improper authorization issue allows users with read-only permissions to obtain write access to managed devices by bypassing access control mechanisms. This can be achieved by exploiting alternative interfaces, such as the web interface or the SNMP browser, to modify device configurations.

Recommendations Update Hirschmann Industrial HiVision version 06.0.00 to 06.0.06. Update Hirschmann Industrial HiVision version 07.0.00 to 07.0.01.

Fix

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

CVE-2017-20238

Affected Products

Undefined

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-20238 · Security Note
• https://vulncheck.com/advisories/hirschmann-industrial-hivision-improper-authorization-privilege-escalation · Note
• https://assets.belden.com/m/7cc5d59343125b25/original/Security-Bulletin-Restricted-User-Roles-Write-Access-HiVision-2017-01.pdf · Note
• https://t.me/cveNotify/208454 · Telegram Post