CVE-2017-20233
Hirschmann HiLCOS Layer-2 Firewall Multicast Broadcast Traffic Bypass
- State
- Published
- Severity
- 5.3 Medium
- Published
- Apr 3, 2026
- Updated
- May 25, 2026
- Reserved
- Apr 3, 2026
Description
Hirschmann HiLCOS products OpenBAT, BAT450, WLC, BAT867 contains a firewall filtering vulnerability that fails to correctly filter IPv4 multicast and broadcast traffic when management IP address filtering is disabled, allowing configured filter rules to be bypassed. Attackers with network access can inject or observe multicast and broadcast packets that should have been blocked by the firewall.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 5.4 Medium | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N | VulnCheck |
Weaknesses
- CWE-284 Improper access control
Affected Products
| Product | Versions |
|---|---|
Hirschmann HiLCOS OpenBAT, BAT450, WLCBelden |
|
Hirschmann HiLCOS BAT867Belden |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.