CVE-2021-37167: Swisslog-Healthcare HMI-3 Control Panel Firmware

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

An insecure permissions issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. A user logged in using the default credentials can gain root access to the device, which provides permissions for all of the functionality of the device.

Affected products

• Swisslog-Healthcare HMI-3 Control Panel Firmware: before 7.2.5.7 (fixed in 7.2.5.7)

Published 2021-08-02. Last modified 2026-06-17.