CVE-2017-20233: falha de média gravidade em Belden Hirschmann HiLCOS BAT867
Hirschmann HiLCOS Layer-2 Firewall Multicast Broadcast Traffic Bypass
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar Hirschmann HiLCOS BAT867+ Monitorar Hirschmann HiLCOS OpenBAT, BAT450, WLC
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.2%
Hirschmann HiLCOS products OpenBAT, BAT450, WLC, BAT867 contains a firewall filtering vulnerability that fails to correctly filter IPv4 multicast and broadcast traffic when management IP address filtering is disabled, allowing configured filter rules to be bypassed. Attackers with network access can inject or observe multicast and broadcast packets that should have been blocked by the firewall.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N