CVE-2021-32930

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The affected product’s configuration is vulnerable due to missing authentication, which may allow an attacker to change configurations and execute arbitrary code on the iView (versions prior to v5.7.03.6182).

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-306

Affected software

Vendor	Product	Versions
n/a	iView	versions prior to v5.7.03.6182

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-154-01Third Party Advisory, US Government Resource
https://us-cert.cisa.gov/ics/advisories/icsa-21-154-01Third Party Advisory, US Government Resource

Timeline

Published: Jun 11, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-329317.8An uninitialized pointer in FATEK Automation FvDesigner, Versions 1.5.88 and prior may be exploited while the application is processing proj CVE-2021-329327.5The affected product is vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information on the iView (versio CVE-2021-329339.8An attacker could leverage an API to pass along a malicious file that could then manipulate the process creation command line in MDT AutoSav CVE-2021-329347.5The affected ThroughTek P2P products (SDKs using versions before 3.1.5, any versions with nossl tag, device firmware not using AuthKey for I CVE-2021-329359.8The affected Cognex product, the In-Sight OPC Server versions v5.7.4 (96) and prior, deserializes untrusted data, which could allow a remote CVE-2021-329367.8An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK (All versions prior to 2022.4) resulting from t CVE-2021-329377.5An attacker can gain knowledge of a session temporary working folder where the getfile and putfile commands are used in MDT AutoSave version CVE-2021-329387.1Drawings SDK (All versions prior to 2022.4) are vulnerable to an out-of-bounds read due to parsing of DWG files resulting from the lack of p CVE-2021-329397.8FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an a CVE-2021-32945.4CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php. An attacker can steal a cookie to perform user CVE-2021-329407.1An out-of-bounds read issue exists in the DWG file-recovering procedure in the Drawings SDK (All versions prior to 2022.5) resulting from th CVE-2021-329419.8Annke N48PBB (Network Video Recorder) products of version 3.4.106 build 200422 and prior are vulnerable to a stack-based buffer overflow, wh