Is CVE-2021-43555 actively exploited?

No active exploitation of CVE-2021-43555 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2021-43555 be exploited remotely?

No. CVE-2021-43555 requires local access to exploit.

What is the CVSS score of CVE-2021-43555?

CVE-2021-43555 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2021-43555

HIGH

CVE-2021-43555

CWE-23Published: November 19, 2021· Updated: Jun 17, 2026

7.8

CVSS v3.1

Official Description

mySCADA myDESIGNER Versions 8.20.0 and prior fails to properly validate contents of an imported project file, which may make the product vulnerable to a path traversal payload. This vulnerability may allow an attacker to plant files on the file system in arbitrary locations or overwrite existing files, resulting in remote code execution.

NVD Source

Technical Analysis

CVE-2021-43555 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.