by Kastro
Paper/Archive/CVE-2021-21904

CVE-2021-21904

talos — A directory traversal vulnerability exists in the CMA CLI setenv command of Garrett Metal Detectors’ iC Module CMA Version 5.0.

EPSS 3%CVSS 9.1
critical.is priorityof 100
45
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 87.0.870 × 2017.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A directory traversal vulnerability exists in the CMA CLI setenv command of Garrett Metal Detectors’ iC Module CMA Version 5.0. An attacker can provide malicious input to trigger this vulnerability

Affected

ProductAffectedFixed inSource
Garrett Metal DetectorsGarrett Metal Detectors iC Module CMA Version 5.0–CNA

Scores by source

talos (CNA)9.1CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

reftalosintelligence.com/vulnerability_reports/TALOS-2021-1356