Distributed Data Systems WebHMI

Summary

Vulnerabilities 2

• Critical 9.1
  CVE-2022-2253

  Distributed Data Systems WebHMI OS Command Injection

  A user with administrative privileges in Distributed Data Systems WebHMI 4.1.1.7662 may send OS commands to execute on the host server.

  Distributed Data Systems WebHMI
  Jul 1, 2022
• Medium 6.2
  CVE-2022-2254

  Distributed Data Systems WebHMI Cross-site Scripting

  A user with administrative privileges in Distributed Data Systems WebHMI 4.1.1.7662 can store a script that could impact other logged in users.

  Distributed Data Systems WebHMI
  Jul 1, 2022

Revision history

1. 2022-06-30 #1

   Publication Date

References

• ICS Advisory ICSA-22-181-04 Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-22-181-04
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B