CVE-2017-20233
Hirschmann HiLCOS Layer-2 Firewall Multicast Broadcast Traffic Bypass
CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th
Hirschmann HiLCOS products OpenBAT, BAT450, WLC, BAT867 contains a firewall filtering vulnerability that fails to correctly filter IPv4 multicast and broadcast traffic when management IP address filtering is disabled, allowing configured filter rules to be bypassed. Attackers with network access can inject or observe multicast and broadcast packets that should have been blocked by the firewall.
| CWE | CWE-284 |
| Vendor | belden |
| Product | hirschmann hilcos openbat, bat450, wlc |
| Published | Apr 3, 2026 |
| Last Updated | Apr 6, 2026 |
Stay Ahead of the Next One
Get instant alerts for belden hirschmann hilcos openbat, bat450, wlc
Be the first to know when new medium vulnerabilities affecting belden hirschmann hilcos openbat, bat450, wlc are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None
Affected Versions
Belden / Hirschmann HiLCOS OpenBAT, BAT450, WLC
0 ≤ 9.10.5126-REL 0 ≤ 9.12.5500-REL
Belden / Hirschmann HiLCOS BAT867
0 ≤ 9.14.5500-REL 0