CVE-2021-27436
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-27436
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
WebAccess/SCADA Versions 9.0 and prior is vulnerable to cross-site scripting, which may allow an attacker to send malicious JavaScript code to an unsuspecting user, which could result in hijacking of the user’s cookie/session tokens, redirecting the user to a malicious webpage and performing unintended browser actions.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: NVD (National Vulnerability Database)
Vulnerability Title
研华 Advantech WebAccess/SCADA 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Advantech WebAccess/SCADA是中国台湾研华（Advantech）公司的一套基于浏览器架构的SCADA软件。该软件支持动态图形显示和实时数据控制，并提供远程控制和管理自动化设备的功能。 WebAccess/SCADA 存在跨站脚本漏洞，该漏洞源于将用户重定向到恶意网页并执行意外的浏览器动作。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Advantech WebAccess/SCADA | Versions 9.0 and prior | - |
II. Public POCs for CVE-2021-27436
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-27436
请登录查看更多情报信息。
- https://us-cert.cisa.gov/ics/advisories/icsa-21-075-01x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2021-27436
Same Patch Batch · n/a · 2021-03-18 · 45 CVEs total
| CVE-2021-23359 | 7.5 HIGH | Arbitrary Command Injection |
| CVE-2019-14850 | Libguestfs Nbdkit 安全漏洞 | |
| CVE-2021-28791 | Valentin Knabel vscode-swiftformat 安全漏洞 | |
| CVE-2021-25764 | JetBrains PhpStorm 安全漏洞 | |
| CVE-2020-36144 | Redash 注入漏洞 | |
| CVE-2021-27358 | Grafana 安全漏洞 | |
| CVE-2021-3416 | QEMU 安全漏洞 | |
| CVE-2021-26275 | NPM eslint-fixer 命令注入漏洞 | |
| CVE-2021-28653 | 西部数据 Western Digital G-Technology ArmorLock NVMe SSD 安全漏洞 | |
| CVE-2020-9367 | ZOHO ManageEngine Desktop Central 代码问题漏洞 | |
| CVE-2020-35492 | cairo 缓冲区错误漏洞 | |
| CVE-2019-14852 | 红帽 3scale 加密问题漏洞 | |
| CVE-2021-28160 | Amazon Wireless-N WiFi Repeater 跨站脚本漏洞 | |
| CVE-2019-3867 | RED HAT Quay web application 代码问题漏洞 | |
| CVE-2020-14516 | Rockwell Automation FactoryTalk Services Platform 安全漏洞 | |
| CVE-2021-22665 | Rockwell Automation DriveTools SP 和 Drives AOP 代码问题漏洞 | |
| CVE-2020-26155 | Utimaco SecurityServer 安全漏洞 | |
| CVE-2021-26216 | SeedDMS 跨站请求伪造漏洞 | |
| CVE-2021-26215 | SeedDMS 跨站请求伪造漏洞 | |
| CVE-2021-28145 | Portlandlabs Concrete5 跨站脚本漏洞 |
Showing top 20 of 45 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
Same weakness: CWE-79
- CVE-2026-8262
Devs Palace ERP Online chart-save cross site scripting - CVE-2026-8256
Devs Palace ERP Online mr-save cross site scripting - CVE-2026-8255
Devs Palace ERP Online add_new_customer cross site scripting - CVE-2026-8254
Devs Palace ERP Online sales_save cross site scripting - CVE-2026-8253
Devs Palace ERP Online purchase_save cross site scripting
V. Comments for CVE-2021-27436
No comments yet