# CVE-2023-7343: Hirschmann Industrial HiVision arbitrary code execution in project files

Source: https://junglewise.ai/threats/cve-2023-7343-hirschmann-industrial-hivision-arbitrary-code-execution-in-project  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-02. Updated: 2026-07-24  
License: CC BY 4.0 with a link back

CVE-2023-7343 · Severity: high · CVSS 7.8 · Published 2026-04-02

Hirschmann Industrial HiVision, a network management software for industrial automation, is vulnerable to a security flaw that could allow an attacker to take control of the system. This occurs when an administrator is tricked into opening a specially crafted project file. If exploited, an attacker could execute malicious commands, potentially leading to unauthorized access to industrial network configurations or operational disruptions.

Vendors: [Hirschmann](https://junglewise.ai/threats/vendors/hirschmann).

## Quick answers

**Is CVE-2023-7343 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2023-7343 being exploited in the wild.

**How severe is CVE-2023-7343?** High severity, with a CVSS score of 7.8, published 2 April 2026.

**Which products and versions are affected?** Hirschmann Industrial HiVision 05.0.00 through 08.3.01.

**Is there a fix for CVE-2023-7343?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2023-7343 attacked?** It is attacked with local access, in a network appliance.

**Am I affected by CVE-2023-7343?** Check whether you run Hirschmann Industrial HiVision at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An arbitrary code execution vulnerability exists in Hirschmann Industrial HiVision versions 05.0.00 through 08.3.01. The flaw is triggered during the processing of project files; if a user with administrative privileges opens a specially crafted file, the application fails to properly validate the contents, leading to code execution within the context of the HiVision process. This is a local attack vector requiring user interaction (UI:R). The vulnerability is addressed in version 08.3.02. Note: Some advisory sources also mention a related privilege escalation path via crafted packets to the HiSecOS web server component.

## Affected products

- Hirschmann Industrial HiVision 05.0.00 through 08.3.01

## Timeline

- 2026-04-02: disclosed
- 2026-04-02: advisory

## References

- [https://assets.belden.com/m/774e2db2b0100bc1/original/Belden-Security-Bulletin-BSECV-2023-06.pdf](https://assets.belden.com/m/774e2db2b0100bc1/original/Belden-Security-Bulletin-BSECV-2023-06.pdf)
- [https://www.vulncheck.com/advisories/belden-industrial-hivision-arbitrary-code-execution-via-malicious-project-file](https://www.vulncheck.com/advisories/belden-industrial-hivision-arbitrary-code-execution-via-malicious-project-file)

## Related threats

- [Hirschmann Industrial HiVision untrusted search path in external applications](https://junglewise.ai/threats/cve-2022-4987-hirschmann-industrial-hivision-untrusted-search-path-in-external)