by Kastro
Paper/Archive/CVE-2021-4105

CVE-2021-4105

BG-TEK COSLAT Firewall — Unauthenticated Remote Code Execution on COSLAT Firewall

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (NVD, CNA agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 58.7.587 × 2011.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper Handling of Parameters vulnerability in BG-TEK COSLAT Firewall allows Remote Code Inclusion. This issue affects COSLAT Firewall: from 5.24.0.R.20180630 before 5.24.0.R.20210727.

Affected

ProductAffectedFixed inSource
COSLAT Firewall5.24.0.r.20180630 – < 5.24.0.r.202107275.24.0.r.20210727CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisoryblog.coslat.com/2021/07/onemli-kritik-guncelleme-2021-07-27.htmlrefusom.gov.tr/bildirim/tr-23-0108refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0108