1. Home
  2. CVE Database
  3. CVE-2021-33000
HIGH · 7.8

CVE-2021-33000

Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code execution. User interaction is required on the WebAccess HMI De...

Vulnerability Description

Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code execution. User interaction is required on the WebAccess HMI Designer (versions 2.1.9.95 and prior).

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
AdvantechWebaccess\/Hmi Designer<= 2.1.9.95

Related Weaknesses (CWE)

CWE-122CWE-787

References

FAQ

What is CVE-2021-33000?

CVE-2021-33000 is a vulnerability with a CVSS score of 7.8 (HIGH). Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code execution. User interaction is required on the WebAccess HMI De...

How severe is CVE-2021-33000?

CVE-2021-33000 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-33000?

Check the references section above for vendor advisories and patch information. Affected products include: Advantech Webaccess\/Hmi Designer.