CVE-2021-37160: Swisslog-Healthcare HMI-3 Control Panel Firmware

Critical severity, CVSS 9.8. EPSS: 8.2% chance of exploitation in the next 30 days.

A firmware validation issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. There is no firmware validation (e.g., cryptographic signature validation) during a File Upload for a firmware update.

Affected products

• Swisslog-Healthcare HMI-3 Control Panel Firmware: before 7.2.5.7 (fixed in 7.2.5.7)

Published 2021-08-02. Last modified 2026-06-17.