CVE-2017-20237
Received Received - Intake
Authentication Bypass in Hirschmann HiVision Enables Remote Code Execution

Publication date: 2026-04-03

Last updated on: 2026-04-03

Assigner: VulnCheck

Description
Hirschmann Industrial HiVision versions prior to 06.0.07 and 07.0.03 contains an authentication bypass vulnerability in the master service that allows unauthenticated remote attackers to execute arbitrary commands with administrative privileges. Attackers can invoke exposed interface methods over the remote service to bypass authentication and achieve remote code execution on the underlying operating system.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-04-03
Last Modified
2026-04-03
Generated
2026-06-16
AI Q&A
2026-04-04
EPSS Evaluated
2026-06-14
NVD
CVE-2017-20237
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
hirschmann industrial_hivision to 06.0.07|end_excluding=07.0.03 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-287 When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

Hirschmann Industrial HiVision versions prior to 06.0.07 and 07.0.03 have an authentication bypass vulnerability in the master service. This flaw allows unauthenticated remote attackers to execute arbitrary commands with administrative privileges by invoking exposed interface methods over the remote service, effectively bypassing authentication and enabling remote code execution on the underlying operating system.

Impact Analysis

This vulnerability can have severe impacts as it allows attackers to remotely execute arbitrary commands with administrative privileges without authentication. This means attackers can take full control of the affected system, potentially leading to data theft, system manipulation, disruption of services, or further network compromise.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2017-20237. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart