Belden Hisecos vulnerabilities

2 vulnerabilities

Known vulnerabilities in Belden Hisecos, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2021-27734beldenhirschmann_hios+1
EPSS score
1.26%
Hirschmann HiOS 07.1.01, 07.1.02, and 08.1.00 through 08.5.xx and HiSecOS 03.3.00 through 03.5.01 allow remote attackers to change the credentials of existing users.8.8CVE-2023-53908beldenhisecos
EPSS score
0.34%
HiSecOS 04.0.01 contains a privilege escalation vulnerability that allows authenticated users to modify their access role through XML-based NETCONF configuration. Attackers can send crafted XML payloads to the /mops_data endpoint with a specific role value to elevate their user privileges to administrative level.