Hmi 3 Control Panel Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:swisslog-healthcare:hmi-3_control_panel_firmware:*:*:*:*:*:*:*:*part: o version: * update: *
| Vendor | Swisslog Healthcare (d0886fd9-c79f-523b-9204-ba06504c0822) |
|---|---|
| Product | Hmi 3 Control Panel Firmware (2bee9c79-2807-541f-93e6-7371eb770dcd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-37167 |
vulnerable | 2026-06-08 05:32:53.462329 |
Details available
An insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. A user logged in using the default credentials can gain root access to the device, which provides permissions for all of the functionality of the device.
Published: 2021-08-02T12:45:52.000Z
Updated: 2024-08-04T01:16:03.295Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37166 |
vulnerable | 2026-06-08 05:32:53.461811 |
Details available
A buffer overflow issue leading to denial of service was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. When HMI3 starts up, it binds a local service to a TCP port on all interfaces of the device, and takes extensive time for the GUI to connect to the TCP socket, allowing the connection to be hijacked by an external attacker.
Published: 2021-08-02T12:44:43.000Z
Updated: 2024-08-04T01:16:02.369Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37165 |
vulnerable | 2026-06-08 05:32:53.461282 |
Details available
A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. When a message is sent to the HMI TCP socket, it is forwarded to the hmiProcessMsg function through the pendingQ, and may lead to remote code execution.
Published: 2021-08-02T10:48:40.000Z
Updated: 2024-08-04T01:16:03.951Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37164 |
vulnerable | 2026-06-08 05:32:53.460910 |
Details available
A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. In the tcpTxThread function, the received data is copied to a stack buffer. An off-by-3 condition can occur, resulting in a stack-based buffer overflow.
Published: 2021-08-02T12:47:50.000Z
Updated: 2024-08-04T01:16:02.556Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37163 |
vulnerable | 2026-06-08 05:32:53.460473 |
Details available
An insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus operated by released versions of software before Nexus Software 7.2.5.7. The device has two user accounts with passwords that are hardcoded.
Published: 2021-08-02T12:46:57.000Z
Updated: 2024-08-04T01:16:03.305Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37162 |
vulnerable | 2026-06-08 05:32:53.460013 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37161 |
vulnerable | 2026-06-08 05:32:53.459437 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37160 |
vulnerable | 2026-06-08 05:32:53.457912 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.