CVE-2021-37164

A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. In the tcpTxThread function, the received data is copied to a stack buffer. An off-by-3 condition can occur, resulting in a stack-based buffer overflow.

• CWE-787

• https://www.armis.com/PwnedPiperBroken Link
• https://www.swisslog-healthcare.comProduct
• https://www.swisslog-healthcare.com/-/media/swisslog-healthcare/documents/customer-service/armis-documents/cve-2021-37164-bulletin---off-by-three-stack-overflow-in-tcptxthread.pdf?rev=daf615075c71484c8059c906872a51e6&hash=1FCC1A5D921E231D71E6B95A9AA8B741Vendor Advisory
• https://www.swisslog-healthcare.com/en-us/customer-care/security-information/cve-disclosures#:~:text=CVE%20Disclosures%20%20%20%20Vulnerability%20Name%20%2C%20%20CVE-2021-37164%20%204%20more%20rows%20
• https://www.armis.com/PwnedPiperBroken Link
• https://www.swisslog-healthcare.comProduct
• https://www.swisslog-healthcare.com/-/media/swisslog-healthcare/documents/customer-service/armis-documents/cve-2021-37164-bulletin---off-by-three-stack-overflow-in-tcptxthread.pdf?rev=daf615075c71484c8059c906872a51e6&hash=1FCC1A5D921E231D71E6B95A9AA8B741Vendor Advisory
• https://www.swisslog-healthcare.com/en-us/customer-care/security-information/cve-disclosures#:~:text=CVE%20Disclosures%20%20%20%20Vulnerability%20Name%20%2C%20%20CVE-2021-37164%20%204%20more%20rows%20

Published

Aug 2, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-37159hso_free_net_device in drivers/net/usb/hso.c in the Linux ke…6.4
• CVE-2021-3716A flaw was found in nbdkit due to to improperly caching plai…3.1
• CVE-2021-37160A firmware validation issue was discovered in HMI3 Control P…9.8
• CVE-2021-37161A buffer overflow issue was discovered in the HMI3 Control P…9.8
• CVE-2021-37162A buffer overflow issue was discovered in HMI3 Control Panel…9.8
• CVE-2021-37163An insecure permissions issue was discovered in HMI3 Control…9.8
• CVE-2021-37165A buffer overflow issue was discovered in HMI3 Control Panel…9.8
• CVE-2021-37166A buffer overflow issue leading to denial of service was dis…7.5
• CVE-2021-37167An insecure permissions issue was discovered in HMI3 Control…9.8
• CVE-2021-3717A flaw was found in Wildfly. An incorrect JBOSS_LOCAL_USER c…7.8
• CVE-2021-37172A vulnerability has been identified in SIMATIC S7-1200 CPU f…7.5
• CVE-2021-37173A vulnerability has been identified in RUGGEDCOM ROX MX5000 …8.8