CVE-2021-37161: Swisslog-Healthcare HMI-3 Control Panel Firmware

Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days.

A buffer overflow issue was discovered in the HMI3 Control Panel contained within the Swisslog Healthcare Nexus Panel, operated by released versions of software before Nexus Software 7.2.5.7. A buffer overflow allows an attacker to overwrite an internal queue data structure and can lead to remote code execution.

Affected products

• Swisslog-Healthcare HMI-3 Control Panel Firmware: before 7.2.5.7 (fixed in 7.2.5.7)

Published 2021-08-02. Last modified 2026-06-17.