Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-05513
HistoryDec 04, 2021 - 12:00 a.m.

Distributed Data Systems WebHMI File Upload Vulnerability

2021-12-0400:00:00
China National Vulnerability Database
www.cnvd.org.cn
13

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

Distributed Data Systems WebHmi is a Scada system with a built-in web server from Distributed Data Systems of Ukraine. It is used to monitor and control any automation system on the local network and over the Internet via computers and mobile devices.A file upload vulnerability exists in Distributed Data Systems WebHMI, which stems from the product’s failure to validate the type of files uploaded, and can be exploited by attackers to cause arbitrary code execution by uploading dangerous files.

CPENameOperatorVersion
distributed data systems webhmilt4.1

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C