9.8
CVE-2021-37164
- EPSS 0.8%
- Veröffentlicht 02.08.2021 13:15:07
- Zuletzt bearbeitet 21.11.2024 06:14:46
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginA buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. In the tcpTxThread function, the received data is copied to a stack buffer. An off-by-3 condition can occur, resulting in a stack-based buffer overflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Swisslog-healthcare ≫ Hmi-3 Control Panel Firmware Version < 7.2.5.7
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.8% | 0.734 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.