CVE-2023-53908: Belden Hisecos

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

HiSecOS 04.0.01 contains a privilege escalation vulnerability that allows authenticated users to modify their access role through XML-based NETCONF configuration. Attackers can send crafted XML payloads to the /mops_data endpoint with a specific role value to elevate their user privileges to administrative level.

Affected products

• Belden Hisecos: version 04.0.01 only

Published 2025-12-17. Last modified 2026-06-17.