critical10.0Public exploit code
CVE-2021-43936
The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal, that may be automatically processed within the product's …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WebHMI 4.0 - Remote Code Execution (RCE) (Authenticated)2021-12-13 · webapps · php
Impact
The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal, that may be automatically processed within the product's environment or lead to arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webhmi | Webhmi Firmware | before 4.1 |