CVE-2021-4477 - Vulnerability Analysis

Overview

Hirschmann HiLCOS OpenBAT and BAT450 contain a firewall bypass vulnerability caused by improper enforcement of firewall rules in IPv6 IPsec deployments, letting attackers bypass firewall policies via IPv6 IPsec connections, exploit requires attacker to establish IPv6 IPsec connections while using IPv6 Internet.

Severity & Score

Impact

Attackers can bypass firewall rules, potentially allowing unauthorized network access and data exposure.

Mitigation

Update to the latest available version with firewall enforcement fixes.

References

• https://assets.belden.com/m/5fd1a50fa50cb252/original/Belden-Security-Bulletin-BSECV-1v0-2019-09.pdf
• https://www.vulncheck.com/advisories/hirschmann-hilcos-openbat-bat450-ipv6-ipsec-firewall-bypass

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner