The vulnerability is an improper authorization flaw that allows read‑only users to obtain write access to managed devices, enabling modification of device configurations. Attackers can exploit this via the web interface or SNMP browser, bypassing the intended access controls. This leads to unauthorized configuration changes, potentially compromising device integrity and control.

Affected product is Belden Hirschmann Industrial HiVision firmware. Versions 06.0.00 and 07.0.00 are vulnerable, and the flaw remains in all releases prior to 06.0.06 and 07.0.01. Any device running these firmware versions with web or SNMP interfaces enabled is at risk.

The CVSS score of 7.1 rates this vulnerability as high severity. The EPSS score is less than 1%, indicating a low but non‑zero exploitation probability, and it has not been listed in the CISA KEV catalog. The exploit can be performed through standard management interfaces; the attack vector is inferred to be remote via web or SNMP, as implied by the description. Therefore, the risk remains significant for systems still operating unpatched firmware.