High severity · published Dec 17, 2025
CVE-2023-53908
HiSecOS 04.0.01 Privilege Escalation via User Role Modification
8.8
CVSS
0.3%
EPSS
No
On KEV
Description
HiSecOS 04.0.01 contains a privilege escalation vulnerability that allows authenticated users to modify their access role through XML-based NETCONF configuration. Attackers can send crafted XML payloads to the /mops_data endpoint with a specific role value to elevate their user privileges to administrative level.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HI
HiSecOS · Belden
04.0.01 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-53908
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-53908
exploit
https://www.exploit-db.com/exploits/51537
product
https://www.belden.com/products/industrial-networking-cybersecurity/software-solutions/device-software/hisecos-firewall-software
third-party-advisory
https://www.vulncheck.com/advisories/hisecos-privilege-escalation-via-user-role-modification
More from HiSecOS
9.8
CVE-2021-27734
Hirschmann HiOS 07.1.01, 07.1.02, and 08.1.00 through 08.5.xx and HiSecOS 03.3.00 through 03.5.01 allow remote attackers to change the credentials of existing users