Vulnerability · Published Apr 2, 2026 · Assigned by VulnCheck

CVE-2023-7342Belden HiSecOS Web Server Privilege Escalation

High 8.8

In plain English

A high-severity privilege mismanagement in Hirschmann HiSecOS EAGLE from Belden. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)0.3%top 79.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

HiSecOS web server versions 03.4.00 prior to 04.1.00 contains a privilege escalation vulnerability that allows authenticated users with operator or auditor roles to escalate privileges to the administrator role by sending specially crafted packets to the web server. Attackers can exploit this flaw to gain full administrative access to the affected device.

Affected products (as reported)

Vendor	Product	Versions
Belden	Hirschmann HiSecOS EAGLE	03.4.00 – through 04.1.00

Weakness: CWE-269 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Belden Security Bulletins vendor-advisory
https://www.vulncheck.com/advisories/belden-hisecos-web-server-privilege-escalation third-party-advisory