A critical privilege escalation vulnerability in Belden Hirschmann Industrial HiVision allows restricted users to modify device configurations, posing a significant risk to industrial network integrity.

This flaw is an improper authorization vulnerability (CWE-285) that permits an authenticated user with read-only privileges to perform unauthorized write operations. By interacting with the web interface or SNMP browser, an attacker can bypass intended access control mechanisms to modify managed device configurations.

The ability for a read-only user to escalate their permissions to write access directly threatens the operational integrity of industrial control systems. Unauthorized configuration changes could lead to network disruption, service degradation, or the introduction of malicious settings, justifying the high severity of the 7.1 CVSS score.

Immediate Action: Upgrade to Hirschmann Industrial HiVision version 06.0.06 or 07.0.01 immediately to resolve the authorization bypass.

Proactive Monitoring: Audit network access logs for anomalous configuration changes or unauthorized management requests originating from accounts with restricted user roles.

Compensating Controls: Restrict access to the web interface and SNMP browser to trusted management subnets until the software can be patched to reduce the attack surface.

Public Exploit Available: No (exploit_available: unknown)

Given the potential for unauthorized configuration changes in sensitive industrial environments, organizations must prioritize upgrading to the fixed versions. Ensure that all Hirschmann Industrial HiVision instances are updated to at least 06.0.06 or 07.0.01 to eliminate this authorization flaw and restore proper access control enforcement.