CVE-2021-43936

The CVE-2021-43936 issue affects WebHMI firmware versions prior to 4.1, enabling an Unrestricted Upload of File with Dangerous Type that can lead to arbitrary code execution. ExploitDB documents a WebHMI 4.0 RCE path requiring authentication, where an uploaded PHP payload and a reverse-shell work...

CVE-2022-2253

CVE-2022-2253 affects Distributed Data Systems WebHMI 4.1.1.7662 (and possibly prior versions). It is an OS command injection (CWE-78) vulnerability caused by improper neutralization of input during web page generation, allowing a user with administrative privileges to send OS commands to execute...

CVE-2022-2254

CVE-2022-2254 affects Distributed Data Systems WebHMI, version 4.1.1.7662 (and possibly prior versions). The vulnerability arises from improper neutralization of input during web page generation, enabling a user with administrative privileges to store a script that could impact other logged-in us...

CVE-2021-43931

The affected product is Distributed Data Systems WebHMI (SCADA) prior to version 4.1. The issue is a vulnerability titled Authentication Bypass by Primary Weakness (CWE-305): the authentication algorithm is sound, but the implemented mechanism can be bypassed due to a separate weakness that is pr...