The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal, that may be automatically processed within the product's environment or lead to arbitrary code execution.
References
Link | Resource |
---|---|
http://packetstormsecurity.com/files/165252/WebHMI-4.0-Remote-Code-Execution.html | Exploit Third Party Advisory VDB Entry |
https://us-cert.cisa.gov/ics/advisories/icsa-21-336-03 | Patch Third Party Advisory US Government Resource |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: icscert
Published: 2021-12-06T17:39:24
Updated: 2021-12-13T16:06:24
Reserved: 2021-11-16T00:00:00
Link: CVE-2021-43936
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-12-06T18:15:08.353
Modified: 2022-04-12T18:06:18.693
Link: CVE-2021-43936
JSON object: View
Redhat Information
No data.
CWE