Lucene search
IcscertCVELIST:CVE-2021-42706HistoryNov 15, 2021 - 2:00 p.m.
CVE-2021-42706 AzeoTech DAQFactory
2021-11-1514:00:15
CWE-416
icscert
www.cve.org
2
azeotech
daqfactory
vulnerability
cve-2021-42706
webaccess
mhi designer
disclosure
information
execute
arbitrary code
installations
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
10.4%
This vulnerability could allow an attacker to disclose information and execute arbitrary code on affected installations of WebAccess/MHI Designer
CNA Affected
[
{
"product": "HMI Designer",
"vendor": "Advantech",
"versions": [
{
"lessThanOrEqual": "2.1.11.0",
"status": "affected",
"version": "All versions",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2021-42706
2021-11-15 14:15:07
cnvd
cnvd
Advantech WebAccess HMI Designer Resource Management Error Vulnerability
2021-11-22 00:00:00
prion
prion
Design/Logic Flaw
2021-11-15 14:15:00
cve
cve
CVE-2021-42706
2021-11-15 14:15:07
ics
ics
Advantech WebAccess HMI Designer (Update A)
2021-11-10 12:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
10.4%
Related for CVELIST:CVE-2021-42706