cve.bz

CVE-2021-43936

9.8 criticalEPSS 36%

Critical (9.8) in webhmi webhmi firmware. EPSS 36% chance of exploitation in the next 30 days.

The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal, that may be automatically processed within the product's environment or lead to arbitrary code execution.

Severity

CVSS 3.1

9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
36% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE
CWE-434
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON