Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
HiSecOS web server versions 03.4.00 prior to 04.1.00 contains a privilege escalation vulnerability that allows authenticated users with operator or auditor roles to escalate privileges to the administrator role by sending specially crafted packets to the web server. Attackers can exploit this flaw to gain full administrative access to the affected device.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2023-7342 HiSecOS web server versions 03.4.00 prior to 04.1.00 contains a privilege escalation vulnerability that allows authenticated users with operator or auditor roles to esc… https://www.cve.org/CVERecord?id=CVE-2023-7342
Post summary
The post is a brief disclosure of CVE-2023-7342, describing a privilege escalation flaw in HiSecOS web server versions prior to 04.1.00.
[CVE-2023-7342: HIGH] A privilege escalation vulnerability in HiSecOS web server enables authenticated users to escalate privileges to admin role, granting full access to the system.#cve,CVE-2023-7342,#cybersecurity https://cvefind.com/CVE-2023-7342
Post summary
The post discloses a high-severity privilege escalation vulnerability in HiSecOS web server that allows authenticated users to assume admin privileges and obtain full system access.