1. Home
  2. CVE Database
  3. CVE-2021-33004
HIGH · 7.8

CVE-2021-33004

The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied files, which may allow an attacker to execute arbitrary code. User interaction is re...

Vulnerability Description

The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied files, which may allow an attacker to execute arbitrary code. User interaction is required on the WebAccess HMI Designer (versions 2.1.9.95 and prior).

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
AdvantechWebaccess\/Hmi Designer<= 2.1.9.95

Related Weaknesses (CWE)

CWE-119CWE-787

References

FAQ

What is CVE-2021-33004?

CVE-2021-33004 is a vulnerability with a CVSS score of 7.8 (HIGH). The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied files, which may allow an attacker to execute arbitrary code. User interaction is re...

How severe is CVE-2021-33004?

CVE-2021-33004 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-33004?

Check the references section above for vendor advisories and patch information. Affected products include: Advantech Webaccess\/Hmi Designer.