VULNERABILITY INTELLIGENCE

CVE-2021-33004

CVSS score7.8 HIGH
EPSS probability0.95%
CISA KEVNot currently listed
Published2021-06-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied files, which may allow an attacker to execute arbitrary code. User interaction is required on the WebAccess HMI Designer (versions 2.1.9.95 and prior).

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-119
  • nvd@nist.gov: CWE-787

Primary references