A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. If an attacker sends a malformed UDP message, a buffer underflow occurs, leading to an out-of-bounds copy and possible remote code execution.
CPE | Name | Operator | Version |
---|---|---|---|
hmi-3_control_panel_firmware | lt | 7.2.5.7 |
www.armis.com/PwnedPiper
www.swisslog-healthcare.com
www.swisslog-healthcare.com/-/media/swisslog-healthcare/documents/customer-service/armis-documents/cve-2021-37162-bulletin---overflow-in-sccprocessmsg.pdf?rev=55a2a1d76199435688a8479970fc54bf&hash=4FDAB2F0EB319F0B773500669D67F3AD
www.swisslog-healthcare.com/en-us/customer-care/security-information/cve-disclosures