CVE-2017-6866

CVE-2017-6866 is a vulnerability affecting Siemens XHQ server versions 4 (prior to V4.7.1.3) and 5 (prior to V5.0.0.2). It allows an authenticated, low-privileged remote user to bypass configured permissions and gain unauthorized read access to data within the XHQ solution. This medium-severity vulnerability has a CVSS score of 6.5, indicating it can be exploited over the network with low attack complexity, resulting in high confidentiality impact without affecting integrity or availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in the KEV catalog, though it has received limited community discussion and media coverage.