CVE-2023-7342: Belden HiSecOS Web Server Privilege Escalation
HiSecOS web server versions 03.4.00 prior to 04.1.00 contains a privilege escalation vulnerability that allows authenticated users with operator or auditor roles to escalate privileges to the administrator role by sending specially crafted packets to the web server. Attackers can exploit this flaw to gain full administrative access to the affected device.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Belden HiSecOS Web Serverto a version that resolves this vulnerability.Fixed in 04.1.00
Event History
Frequently Asked Questions
What is the severity of CVE-2023-7342?
CVE-2023-7342 has been classified with a high severity rating due to its potential for privilege escalation.
How do I fix CVE-2023-7342?
To mitigate CVE-2023-7342, upgrade to Belden HiSecOS Web Server version 04.1.00 or later.
Who is affected by CVE-2023-7342?
CVE-2023-7342 affects authenticated users with operator or auditor roles in Belden HiSecOS Web Server versions 03.4.00 and earlier.
What type of vulnerability is CVE-2023-7342?
CVE-2023-7342 is a privilege escalation vulnerability that allows users to gain unauthorized administrative access.
Can CVE-2023-7342 be exploited remotely?
Yes, CVE-2023-7342 can be exploited remotely by sending specially crafted packets to the vulnerable web server.