Lucene search
PRIOn knowledge basePRION:CVE-2021-37160HistoryAug 02, 2021 - 1:15 p.m.
Input validation
2021-08-0213:15:00
PRIOn knowledge base
www.prio-n.com
9
A firmware validation issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. There is no firmware validation (e.g., cryptographic signature validation) during a File Upload for a firmware update.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hmi-3_control_panel_firmware | lt | 7.2.5.7 |
References
www.armis.com/PwnedPiper
www.swisslog-healthcare.com
www.swisslog-healthcare.com/-/media/swisslog-healthcare/documents/customer-service/armis-documents/cve-2021-37160-bulletin---no-firmware-update-validation.pdf?rev=c7f94647037c4007992e2e626d445561&hash=E89531490070A809FB74994018BA1248
www.swisslog-healthcare.com/en-us/customer-care/security-information/cve-disclosures
Related
cnvd
cnvd
Nexus Control Panel code issue vulnerability
2021-08-04 00:00:00
cvelist
cvelist
CVE-2021-37160
2021-08-02 12:43:57
cve
cve
CVE-2021-37160
2021-08-02 13:15:07
nvd
nvd
CVE-2021-37160
2021-08-02 13:15:07
threatpost
threatpost
‘PwnedPiper’: Devastating Bugs in >80% of Hospital Pneumatics
2021-08-02 20:58:54
ics
ics
Swisslog Healthcare Translogic PTS
2021-08-03 12:00:00
thn
thn
PwnedPiper PTS Security Flaws Threaten 80% of Hospitals in the U.S.
2021-08-02 12:03:00