← Database

CVE-2021-37165

CRITICAL CVSS: 9.8 Published: 2021-08-02 Modified: 2026-06-17

Description

A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. When a message is sent to the HMI TCP socket, it is forwarded to the hmiProcessMsg function through the pendingQ, and may lead to remote code execution.

Affected Platforms

Swisslog-Healthcare Hmi-3 Control Panel FirmwareSwisslog-Healthcare Hmi-3 Control Panel

Weakness Type

CWE-120

References