CVE-2021-43936

The Distributed Data Systems WebHMI SCADA system is vulnerable to Unrestricted Upload of File with Dangerous Type (CWE-434 ) in versions prior to 4.1 . The software fails to effectively validate uploaded file types, allowing an attacker to upload or transfer dangerous files that can be automatica...

CVE-2022-2253

CVE-2022-2253 affects Distributed Data Systems WebHMI 4.1.1.7662 (and possibly prior versions). It is an OS command injection (CWE-78) vulnerability caused by improper neutralization of input during web page generation, allowing a user with administrative privileges to send OS commands to execute...

CVE-2022-2254

CVE-2022-2254 affects Distributed Data Systems WebHMI, version 4.1.1.7662 (and possibly prior versions). The vulnerability arises from improper neutralization of input during web page generation, enabling a user with administrative privileges to store a script that could impact other logged-in us...

CVE-2021-43931

The affected product is Distributed Data Systems WebHMI (SCADA) prior to version 4.1. The issue is a vulnerability titled Authentication Bypass by Primary Weakness (CWE-305): the authentication algorithm is sound, but the implemented mechanism can be bypassed due to a separate weakness that is pr...