Swisslog Healthcare Translogic PTS

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Swisslog Healthcare Equipment: Translogic PTS Pneumatic Tube Systems Vulnerabilities: Use of Hard-coded Password, Execution with Unnecessary Privileges, Improper Authentication, Download of Code without...

CVE-2021-37161

creationtimestamp| type| source ---|---|--- 2021-08-02 16:27:31+00:00| seen| https://t.me/cibsecurity/26679 2021-08-02 21:41:30+00:00| seen| https://t.me/ctinow/37902 2021-08-02 21:59:33+00:00| seen| https://t.me/cibsecurity/26689 2021-08-03 12:35:49+00:00| seen| https://t.me/truesecator/1966...

CVE-2021-37161

CVE-2021-37161 describes a buffer overflow in the Swisslog Healthcare Nexus Panel’s HMI3 Control Panel (pre Nexus Software 7.2.5.7) that can overwrite an internal queue data structure and lead to remote code execution. The impact is high (network, no auth, no user interaction). Remediation: upgra...