Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Distributed Data Systems Clear all filters
TI-2022-02079 CVE-2022-2254 · GHSA-m8mj-rx2h-m764

Distributed Data Systems WebHMI Cross-site Scripting

Priority LOW 28

A user with administrative privileges in Distributed Data Systems WebHMI 4.1.1.7662 can store a script that could impact other logged in users.

CVSS 3.1MEDIUM 6.2 Network High privileges User interaction EPSS 0.00512 Published 2022-07-01 No fix listed CWE-79
TI-2022-02078 CVE-2022-2253 · GHSA-p9f4-jf4w-hf2c

Distributed Data Systems WebHMI OS Command Injection

Priority MEDIUM 44

A user with administrative privileges in Distributed Data Systems WebHMI 4.1.1.7662 may send OS commands to execute on the host server.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01253 Published 2022-07-01 No fix listed CWE-78
TI-2021-19693 CVE-2021-43931 · GHSA-9p49-7vh4-82rx

Distributed Data Systems WebHM

Priority MEDIUM 45

The authentication algorithm of the WebHMI portal is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01481 Published 2021-12-06 Fixed in 4.1 CWE-287
TI-2021-19698 CVE-2021-43936 · GHSA-9558-55mx-wf4p

Distributed Data Systems WebHM

Priority HIGH 69

The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal, that may be automatically processed within the product's environment or lead to arbitrary code execution.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.35804 Published 2021-12-06 Fixed in 4.1 CWE-434