CVE-2021-33015

Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write via an uninitialized pointer. An attacker could leverage this vulnerability to execute code in the context of the current process.

• CWE-824
• CWE-824

• https://us-cert.cisa.gov/ics/advisories/icsa-21-224-02Third Party Advisory, US Government Resource
• https://us-cert.cisa.gov/ics/advisories/icsa-21-224-02Third Party Advisory, US Government Resource

Published

Aug 25, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-33009mySCADA myPRO versions prior to 8.20.0 allows an unauthentic…7.5
• CVE-2021-33010An exception is thrown from a function in AVEVA System Platf…7.5
• CVE-2021-33011All versions of the afffected TOYOPUC-PC10 Series,TOYOPUC-Pl…4.3
• CVE-2021-33012Rockwell Automation MicroLogix 1100, all versions, allows a …8.6
• CVE-2021-33013mySCADA myPRO versions prior to 8.20.0 does not restrict una…7.5
• CVE-2021-33014An attacker can gain VxWorks Shell after login due to hard-c…8.8
• CVE-2021-33016An attacker can gain full access (read/write/delete) to sens…9.8
• CVE-2021-33017The standard access path of the IntelliBridge EC 40 and 60 H…8.8
• CVE-2021-33018The use of a broken or risky cryptographic algorithm in Phil…7.5
• CVE-2021-33019A stack-based buffer overflow vulnerability in Delta Electro…7.8
• CVE-2021-33020Philips Vue PACS versions 12.2.x.x and prior uses a cryptogr…7.5
• CVE-2021-33021xArrow SCADA versions 7.2 and prior is vulnerable to cross-s…6.1