CVE-2022-2253 CRITICAL

CVE-2022-2253: Distributed Data Systems WebHMI OS Command Injection

Vendor Distributed Data Systems

Product WebHMI

Weakness CWE-78

Published July 1, 2022

Last update April 16, 2025

CVSS base score

9.1/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

A user with administrative privileges in Distributed Data Systems WebHMI 4.1.1.7662 may send OS commands to execute on the host server.

Key dates

July 1, 2022 CVE published

April 16, 2025 Record updated

External resources

Related vulnerabilities