CVE-2022-2253criticalCWE-78

CVE-2022-2253: critical vulnerability in Distributed Data Systems WebHMI

Distributed Data Systems WebHMI OS Command Injection

Published · Updated

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.1epss 1.2%
exploitation probability
1.2%top 32% of all CVEs
observed exploitation
nono source reports it
A user with administrative privileges in Distributed Data Systems WebHMI 4.1.1.7662 may send OS commands to execute on the host server.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected products
Distributed Data Systems · WebHMI
Related CVEs — Distributed Data Systems WebHMI

In the same product, most dangerous first.

CVE-2021-43936CRITICALDistributed Data Systems WebHMEPSS 35.8%CVE-2021-43931CRITICALDistributed Data Systems WebHMEPSS 1.5%CVE-2022-2254MEDIUMDistributed Data Systems WebHMI Cross-site ScriptingEPSS 0.5%
References
https://www.cisa.gov/uscert/ics/advisories/icsa-22-181-04