Executive Summary

This vulnerability exists in Hirschmann Industrial HiVision versions 06.0.00 and 07.0.00 prior to 06.0.06 and 07.0.01. It is an improper authorization flaw that allows users with read-only permissions to bypass access control mechanisms and gain write access to managed devices.

Attackers can exploit alternative interfaces such as the web interface or SNMP browser to modify device configurations despite having restricted permissions.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow unauthorized users who should only have read-only access to instead modify device configurations. This can lead to unauthorized changes in network device settings, potentially disrupting network operations or compromising device security.

Useful 0 Not Useful 0