CVE-2021-37164: Swisslog-Healthcare HMI-3 Control Panel Firmware

Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days.

A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. In the tcpTxThread function, the received data is copied to a stack buffer. An off-by-3 condition can occur, resulting in a stack-based buffer overflow.

Affected products

Published 2021-08-02. Last modified 2026-06-17.