Lucene search
PRIOn knowledge basePRION:CVE-2021-37165HistoryAug 02, 2021 - 11:15 a.m.
Buffer overflow
2021-08-0211:15:00
PRIOn knowledge base
www.prio-n.com
6
A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. When a message is sent to the HMI TCP socket, it is forwarded to the hmiProcessMsg function through the pendingQ, and may lead to remote code execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hmi-3_control_panel_firmware | lt | 7.2.5.7 |
References
www.armis.com/PwnedPiper
www.swisslog-healthcare.com
www.swisslog-healthcare.com/-/media/swisslog-healthcare/documents/customer-service/armis-documents/cve-2021-37165-bulletin---overflow-in-hmiprocessmsg.pdf?rev=2e2678dab62b41ba999cd6d1e03974ca&hash=F465ACE2C7FAED826B52FE996E36ACEC
www.swisslog-healthcare.com/en-us/customer-care/security-information/cve-disclosures
Related
nvd
nvd
CVE-2021-37165
2021-08-02 11:15:11
cnvd
cnvd
Nexus Control Panel Buffer Overflow Vulnerability (CNVD-2021-62179)
2021-08-04 00:00:00
cve
cve
CVE-2021-37165
2021-08-02 11:15:11
cvelist
cvelist
CVE-2021-37165
2021-08-02 10:48:40
ics
ics
Swisslog Healthcare Translogic PTS
2021-08-03 12:00:00
threatpost
threatpost
‘PwnedPiper’: Devastating Bugs in >80% of Hospital Pneumatics
2021-08-02 20:58:54
thn
thn
PwnedPiper PTS Security Flaws Threaten 80% of Hospitals in the U.S.
2021-08-02 12:03:00