CVE-2021-32935 — Cognex In-Sight OPC Server - Deserialization of Untrusted Data

CVE-2021-32935

Cognex In-Sight OPC Server - Deserialization of Untrusted Data PUBLISHED

Description (CNA)

The affected Cognex product, the In-Sight OPC Server versions v5.7.4 (96) and prior, deserializes untrusted data, which could allow a remote attacker access to system level permission commands and local privilege escalation.

Affected (CNA)

Vendor / product	Versions
Cognex / In-Sight OPC Server	affected All through v5.7.4 (96)

CWE

CWE-502

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-224-01

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-21-224-01

CISA-ADP

No English description supplied.

No references supplied.