CVE-2017-20233: Hirschmann HiLCOS Layer-2 Firewall Multicast Broadcast Traffic Bypass
Hirschmann HiLCOS products OpenBAT, BAT450, WLC, BAT867 contains a firewall filtering vulnerability that fails to correctly filter IPv4 multicast and broadcast traffic when management IP address filtering is disabled, allowing configured filter rules to be bypassed. Attackers with network access can inject or observe multicast and broadcast packets that should have been blocked by the firewall.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-20233?
CVE-2017-20233 has been classified as a medium severity vulnerability.
How do I fix CVE-2017-20233?
To fix CVE-2017-20233, ensure that management IP address filtering is enabled on the affected devices.
What products are affected by CVE-2017-20233?
CVE-2017-20233 affects Hirschmann products including OpenBAT, BAT450, WLC, and BAT867.
What kind of flaw is CVE-2017-20233?
CVE-2017-20233 is a firewall filtering vulnerability that allows the bypass of multicast and broadcast traffic.
Can CVE-2017-20233 be exploited remotely?
Yes, CVE-2017-20233 can be exploited remotely if the management settings are not properly configured.