CVE-2026-65313 describes a security weakness in the provisioning process of ANDRITZ HIPASE-250 workstations, where a fixed, hard-coded password for x11vnc is set by a provisioning script. Because the same credential is used on every workstation provisioned this way, an attacker with network adjacency and knowledge of the password can remotely access the workstation via VNC without authentication. This vulnerability is classified under CWE-798 (Use of Hard-coded Credentials) and CWE-1392. The CVSS v3.1 base score is 8.1, indicating high severity, with attack vector being adjacent network, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality and integrity but no impact on availability. No patch or official remediation guidance is currently available.

An attacker with adjacent-network access who knows the hard-coded password can gain unauthorized remote access to the affected HIPASE-250 workstations via VNC. This compromises confidentiality and integrity of the workstation, potentially allowing the attacker to view or manipulate sensitive data or system configurations. There is no indication of availability impact. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should restrict network access to the VNC service on HIPASE-250 workstations to trusted hosts only and consider changing the default password if possible. Monitoring for unauthorized VNC connections and network segmentation to limit adjacent-network access can help reduce risk.