CVE-2023-7342 - Vulnerability Analysis

Overview

HiSecOS web server contains a privilege escalation caused by specially crafted packets, letting authenticated users with operator or auditor roles escalate to administrator privileges, exploit requires authentication.

Severity & Score

Impact

Authenticated users can escalate privileges to administrator, gaining full control over the device.

Mitigation

Update to the latest version of HiSecOS web server.

References

• https://assets.belden.com/m/4828b7cf8b652105/original/Microsoft-Word-Belden_Security_Bulletin_BSECV-2021-07_1v0-docx.pdf
• https://www.vulncheck.com/advisories/belden-hisecos-web-server-privilege-escalation

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner