Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

TI-2021-19693 CVE-2021-43931 · GHSA-9p49-7vh4-82rx

Distributed Data Systems WebHM

Priority MEDIUM 45

The authentication algorithm of the WebHMI portal is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01481 Published 2021-12-06 Fixed in 4.1 CWE-287
TI-2021-19698 CVE-2021-43936 · GHSA-9558-55mx-wf4p

Distributed Data Systems WebHM

Priority HIGH 69

The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal, that may be automatically processed within the product's environment or lead to arbitrary code execution.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.35804 Published 2021-12-06 Fixed in 4.1 CWE-434