CVE-2021-33000: Advantech Webaccess/hmi Designer

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

Parsing a maliciously crafted project file may cause a heap-based buffer overflow, which may allow an attacker to perform arbitrary code execution. User interaction is required on the WebAccess HMI Designer (versions 2.1.9.95 and prior).

Affected products

• Advantech Webaccess/hmi Designer: up to and including 2.1.9.95

Published 2021-06-24. Last modified 2026-06-17.