CVE-2017-20238

Name of the Vulnerable Software and Affected Versions Hirschmann Industrial HiVision versions 06.0.00 through 06.0.05 Hirschmann Industrial HiVision versions 07.0.00 through 07.0.00

Description An improper authorization issue allows users with read-only permissions to obtain write access to managed devices by bypassing access control mechanisms. This can be achieved by exploiting alternative interfaces, such as the web interface or the SNMP browser, to modify device configurations.

Recommendations Update Hirschmann Industrial HiVision version 06.0.00 to 06.0.06. Update Hirschmann Industrial HiVision version 07.0.00 to 07.0.01.