CVE-2022-4987 - CVE House

Back to Database

Status published High CVE-2022-4987

Hirschmann Industrial HiVision External Application Path Hijacking Leading to Arbitrary Code Execution

7 CVSS

Vulnerability Description

Hirschmann Industrial HiVision version 08.1.03 prior to 08.1.04 and 08.2.00 contains a vulnerability in the execution of user-configured external applications that allows a local attacker to execute arbitrary binaries. Due to insufficient path sanitization, an attacker can place a malicious binary in the execution path of a configured external application, causing it to be executed instead of the intended application. This can result in execution with elevated privileges depending on the context of the external application.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-4987

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Belden

View All →

HiOS Switch Platform Denial-of-Service via Web Interface

Hirschmann HiEOS Authentication Bypass via HTTP Management Module

Hirschmann EagleSDV Denial of Service via TLS

Belden Industrial HiVision Arbitrary Code Execution via Malicious Project File

Belden HiSecOS Web Server Privilege Escalation

Affected Vendor

Belden

View all reports →

Affected Software

Hirschmann Industrial HiVision

Vulnerable Versions:

0, 08.1.04, 08.2.00

Timeline

Official Publish: April 3rd, 2026

Last Modified: May 25th, 2026

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1574 Hijack Execution Flow

Privilege Escalation

T1036 Masquerading

Defense Evasion

T1543 Create or Modify System Process

T1059 Command and Scripting Interpreter

T1569 System Services