What’s Vulnerable › Vulnerabilities

CVE-2023-7342: Belden HiSecOS Web Server Privilege Escalation

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-02 · updated 2026-07-24
• Weakness: CWE-269

Description

HiSecOS web server versions 03.4.00 prior to 04.1.00 contains a privilege escalation vulnerability that allows authenticated users with operator or auditor roles to escalate privileges to the administrator role by sending specially crafted packets to the web server. Attackers can exploit this flaw to gain full administrative access to the affected device.

Affected products

• Belden Hirschmann HiSecOS EAGLE: from 03.4.00 through 04.1.00

References

• https://assets.belden.com/m/4828b7cf8b652105/original/Microsoft-Word-Belden_Security_Bulletin_BSECV-2021-07_1v0-docx.pdf
• https://www.vulncheck.com/advisories/belden-hisecos-web-server-privilege-escalation

Get alerted when CVE-2023-7342 or the next vulnerability affects your stack