CVE-2021-33002: Advantech Webaccess/hmi Designer

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

Opening a maliciously crafted project file may cause an out-of-bounds write, which may allow an attacker to execute arbitrary code. User interaction is require on the WebAccess HMI Designer (versions 2.1.9.95 and prior).

Affected products

• Advantech Webaccess/hmi Designer: up to and including 2.1.9.95

Published 2021-06-24. Last modified 2026-06-17.