title: Distributed Data Systems WebHM
description: The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal, that may be automatically processed within the product's environment or lead to arbitrary code execution.
problem types: Unrestricted Upload of File with Dangerous Type
affected:
{
product: WebHMI
vendor: Distributed Data Systems
versions:
lessThan: 4.1, status: affected, version: 4.1, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 10
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
version: 3.1
]
exploits: None
workarounds: Distributed Data Systems recommends upgrading the platform software to the latest release, Version 4.1