Read the docs

Distributed Data Systems

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Distributed Data Systems records in CISA KEV

No Distributed Data Systems vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Webhmi Firmware 4 records HIGH

Records

4 records in Webhmi Firmware · all components

TI-2021-19698 CVE-2021-43936 · GHSA-9558-55mx-wf4p

Distributed Data Systems WebHM

Priority HIGH 69

The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal, that may be automatically processed within the product's environment or lead to arbitrary code execution.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.35804 Published 2021-12-06 Fixed in 4.1 CWE-434
TI-2021-19693 CVE-2021-43931 · GHSA-9p49-7vh4-82rx

Distributed Data Systems WebHM

Priority MEDIUM 45

The authentication algorithm of the WebHMI portal is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01481 Published 2021-12-06 Fixed in 4.1 CWE-287
TI-2022-02078 CVE-2022-2253 · GHSA-p9f4-jf4w-hf2c

Distributed Data Systems WebHMI OS Command Injection

Priority MEDIUM 44

A user with administrative privileges in Distributed Data Systems WebHMI 4.1.1.7662 may send OS commands to execute on the host server.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01253 Published 2022-07-01 No fix listed CWE-78
TI-2022-02079 CVE-2022-2254 · GHSA-m8mj-rx2h-m764

Distributed Data Systems WebHMI Cross-site Scripting

Priority LOW 28

A user with administrative privileges in Distributed Data Systems WebHMI 4.1.1.7662 can store a script that could impact other logged in users.

CVSS 3.1MEDIUM 6.2 Network High privileges User interaction EPSS 0.00512 Published 2022-07-01 No fix listed CWE-79
Open these records in search →