AT&T
11 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-21811 | AT&T Labs Xmill 0.7 | A memory corruption vulnerability exists in the XML-parsing CreateLabelOrAttrib functionality of AT&T Labs’ Xmill 0.7. A specially crafted X | CRITICAL 9.8 | 1.1 % | ||
| CVE-2021-21828 | AT&T Labs Xmill 0.7, Schneider Electric EcoStruxure Control Expert 15 | A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. In the defa | CRITICAL 9.8 | 1.1 % | ||
| CVE-2021-21827 | AT&T Labs Xmill 0.7, Schneider Electric EcoStruxure Control Expert 15 | A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. Within `Dec | CRITICAL 9.8 | 1.1 % | ||
| CVE-2021-21826 | AT&T Labs Xmill 0.7, Schneider Electric EcoStruxure Control Expert 15 | A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7. Within `Dec | CRITICAL 9.8 | 1.1 % | ||
| CVE-2021-21825 | AT&T Labs Xmill 0.7, Schneider Electric EcoStruxure Control Expert 15 | A heap-based buffer overflow vulnerability exists in the XML Decompression PlainTextUncompressor::UncompressItem functionality of AT&T Labs’ | CRITICAL 9.8 | 2.3 % | ||
| CVE-2021-21815 | AT&T Labs Xmill 0.7 | A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs' Xmill 0.7. Within t | HIGH 7.8 | 0.3 % | ||
| CVE-2021-21813 | AT&T Labs Xmill 0.7 | Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern | HIGH 7.8 | 0.3 % | ||
| CVE-2021-21814 | AT&T Labs Xmill 0.7 | Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern | HIGH 7.8 | 0.3 % | ||
| CVE-2021-21812 | AT&T Labs Xmill 0.7 | A stack-based buffer overflow vulnerability exists in the command-line-parsing HandleFileArg functionality of AT&T Labs’ Xmill 0.7. Within t | HIGH 7.8 | 0.3 % | ||
| CVE-2021-21829 | AT&T Labs Xmill 0.7 | A heap-based buffer overflow vulnerability exists in the XML Decompression EnumerationUncompressor::UncompressItem functionality of AT&T Lab | CRITICAL 9.8 | 2.5 % | ||
| CVE-2021-21830 | AT&T Labs Xmill 0.7 | A heap-based buffer overflow vulnerability exists in the XML Decompression LabelDict::Load functionality of AT&T Labs’ Xmill 0.7. A speciall | CRITICAL 9.8 | 2.3 % |