CVE-2017-20233
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
Hirschmann HiLCOS products (OpenBAT, BAT450, WLC, BAT867) have a firewall filtering vulnerability that fails to correctly filter IPv4 multicast and broadcast traffic when management IP address filtering is disabled, allowing configured filter rules to be bypassed.
Risk Assessment
Attackers with network access can inject or observe multicast and broadcast packets that should have been blocked by the firewall, potentially leading to network confidentiality and integrity breaches.
Recommendation
It is recommended to enable management IP address filtering and update the firmware to the latest version provided by the vendor.
Original NVD description (English source)
Hirschmann HiLCOS products OpenBAT, BAT450, WLC, BAT867 contains a firewall filtering vulnerability that fails to correctly filter IPv4 multicast and broadcast traffic when management IP address filtering is disabled, allowing configured filter rules to be bypassed. Attackers with network access can inject or observe multicast and broadcast packets that should have been blocked by the firewall.