CVE-2017-20237

Name of the Vulnerable Software and Affected Versions Hirschmann Industrial HiVision versions prior to 06.0.07 Hirschmann Industrial HiVision versions prior to 07.0.03

Description An authentication bypass exists in the master service. Unauthenticated remote attackers can invoke exposed interface methods via the remote service to bypass security checks and execute arbitrary commands with administrative privileges on the underlying operating system.

Recommendations Update Hirschmann Industrial HiVision to version 06.0.07 or later. Update Hirschmann Industrial HiVision to version 07.0.03 or later.