Vulnerability · Published Apr 3, 2026 · Assigned by VulnCheck
CVE-2022-4987Hirschmann Industrial HiVision External Application Path Hijacking Leading to Arbitrary Code Execution
High 7.3
In plain English
A high-severity security flaw in Hirschmann Industrial HiVision from Belden. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).
Official description
Hirschmann Industrial HiVision version 08.1.03 prior to 08.1.04 and 08.2.00 contains a vulnerability in the execution of user-configured external applications that allows a local attacker to execute arbitrary binaries. Due to insufficient path sanitization, an attacker can place a malicious binary in the execution path of a configured external application, causing it to be executed instead of the intended application. This can result in execution with elevated privileges depending on the context of the external application.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Belden | Hirschmann Industrial HiVision | 0 – through 08.1.03 |
Weakness: CWE-426 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
References
- https://assets.belden.com/m/62ae167036cb17c3/original/Microsoft-Word-Belden_Security_Bulletin_BSECV-2021-03_1v0-002-docx.pdf vendor-advisory
- https://www.vulncheck.com/advisories/hirschmann-industrial-hivision-external-application-path-hijacking-leading-to-arbitrary-code-execution third-party-advisory