CVE-2021-33023

Advantech WebAccess versions 9.02 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code.

• CWE-122
• CWE-787

• https://us-cert.cisa.gov/ics/advisories/icsa-21-285-02Mitigation, Third Party Advisory, US Government Resource
• https://us-cert.cisa.gov/ics/advisories/icsa-21-285-02Mitigation, Third Party Advisory, US Government Resource

Published

Oct 18, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-33017The standard access path of the IntelliBridge EC 40 and 60 H…8.8
• CVE-2021-33018The use of a broken or risky cryptographic algorithm in Phil…7.5
• CVE-2021-33019A stack-based buffer overflow vulnerability in Delta Electro…7.8
• CVE-2021-33020Philips Vue PACS versions 12.2.x.x and prior uses a cryptogr…7.5
• CVE-2021-33021xArrow SCADA versions 7.2 and prior is vulnerable to cross-s…6.1
• CVE-2021-33022Philips Vue PACS versions 12.2.x.x and prior transmits sensi…7.5
• CVE-2021-33024Philips Vue PACS versions 12.2.x.x and prior transmits or st…7.5
• CVE-2021-33025xArrow SCADA versions 7.2 and prior permits unvalidated regi…7.8
• CVE-2021-33026The Flask-Caching extension through 1.10.1 for Flask relies …9.8
• CVE-2021-33027Sylabs Singularity Enterprise through 1.6.2 has Insufficient…9.8
• CVE-2021-33031In LabCup before <v2_next_18022, it is possible to use the s…3.1
• CVE-2021-33032A Remote Code Execution (RCE) vulnerability in the WebUI com…10