CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2017-20237 — Hirschmann Industrial HiVision versions prior to 06.0.07 and 07.0.03 contains an...

Friday, April 3, 2026 at 09:17 PM UTC·Source: NIST NVD

Updated: Monday, April 6, 2026 at 12:17 AM UTC

Executive Summary

Hirschmann Industrial HiVision versions prior to 06.0.07 and 07.0.03 contains an authentication bypass vulnerability in the master service that allows unauthenticated remote attackers to execute arbitrary commands with administrative privileges. Attackers can invoke exposed interface methods over the remote service to bypass authentication and achieve remote code execution on the underlying operat

Analysis

Hirschmann Industrial HiVision versions prior to 06.0.07 and 07.0.03 contains an authentication bypass vulnerability in the master service that allows unauthenticated remote attackers to execute arbitrary commands with administrative privileges. Attackers can invoke exposed interface methods over the remote service to bypass authentication and achieve remote code execution on the underlying operating system. CVSS Score: 9.8. Published: 2026-04-03T21:17:07.103.

Indicators of Compromise (1)

CVE (1)
CVE-2017-20237
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Apr 3, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

The End of Static Security: Why AI Demands Real-Time Microsegmentation

AI is compressing cyberattack timelines from months to minutes. While segmentation has been a gold standard security practice for years, many organizations are still operating with outdated, static approaches.

Bank Info Security
MEDIUMVulnerability

Why Data Security Standards in Cancer Innovation Matter

Cancer research and treatment innovation - and the tech that powers that - requires a great deal of collaboration and data sharing among multiple parties. But keeping that sensitive information secure and private is crucial - and requires adherence to standards, said Baxter Lee of Clearwater.

Bank Info Security
MEDIUMVulnerability

One-Time Passcodes Are Gateway for Financial Fraud Attacks

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/one-time-passcodes-are-gateway-for-financial-fraud-attacks-image_small-6-a-31341.jpg" align=right hspace=4><b>Report Reveals Growing Trend of Fraudsters Intercepting SMS-Based Verification</b><br>Financial institutions have historically relied on one-time passcodes as a primary authentication control for their accountholders. But

Bank Info Security