CVE-2021-33004

7.8 highEPSS 0.9%

High (7.8) in advantech webaccess\/hmi designer. EPSS 0.9% chance of exploitation in the next 30 days.

The affected product is vulnerable to memory corruption condition due to lack of proper validation of user supplied files, which may allow an attacker to execute arbitrary code. User interaction is required on the WebAccess HMI Designer (versions 2.1.9.95 and prior).

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWEs: CWE-787, CWE-119
Published: 2021-06-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

advantech:webaccess\/hmi_designer

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-173-01
https://us-cert.cisa.gov/ics/advisories/icsa-21-173-01

Check your stack JSON