Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Distributed Data Systems WebHMI

🗓️ 02 Dec 2021 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType 
ics
 ics🔗 www.cisa.gov👁 45 Views

Vulnerabilities in Distributed Data Systems WebHMI, allows admin login without password, remote code execution with root privileges, affected products prior to 4.1, critical infrastructure sectors: critical manufacturing, countries deployed: Germany, Poland, Ukraine, United States

Related
Refs
ReporterTitlePublishedViews
Family
0day.today		WebHMI 4.0 - Remote Code Execution Exploit
13 Dec 202100:00
–zdt
GithubExploit		Exploit for Unrestricted Upload of File with Dangerous Type in Webhmi Webhmi_Firmware
12 Dec 202122:31
–githubexploit
BDU FSTEC		The vulnerability of SCADA systems with integrated web servers, related to deficiencies in authentication procedures, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
4 Jan 202200:00
–bdu_fstec
BDU FSTEC		The vulnerability of SCADA systems with integrated web servers, related to the lack of file download restrictions, allows intruders to execute arbitrary code.
4 Jan 202200:00
–bdu_fstec
Circl		CVE-2021-43931
6 Dec 202120:20
–circl
Circl		CVE-2021-43936
6 Dec 202120:20
–circl
CNNVD		Distributed Data Systems WebHmi 代码问题漏洞
2 Dec 202100:00
–cnnvd
CNNVD		Distributed Data Systems WebHmi 授权问题漏洞
2 Dec 202100:00
–cnnvd
CNVD		Distributed Data Systems WebHMI File Upload Vulnerability
4 Dec 202100:00
–cnvd
CNVD		Distributed Data Systems WebHmi Authorization Issues Vulnerability
4 Dec 202100:00
–cnvd
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
02 Dec 2021 00:00Current
10High risk
Vulners AI Score10
CVSS 210
CVSS 3.19.8 - 10
EPSS0.28376
webhmivulnerabilitiesauthentication bypassfile uploadscadacvssexploitationrisk evaluationmitigationsnetwork exposurefirewallsvpnscisa
45