7.5
High
CVE-2021-21902 An authentication bypass vulnerability exists in the CMA run_server_6877 functionality of Garrett Metal Detectors iC…
Description
An authentication bypass vulnerability exists in the CMA run_server_6877 functionality of Garrett Metal Detectors iC Module CMA Version 5.0. A properly-timed network connection can lead to authentication bypass via session hijacking. An attacker can send a sequence of requests to trigger this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Garrett Metal Detectors | Versions not published |
Other CVEs of Garrett Metal Detectors
The 9 CVEs of Garrett Metal Detectors →
CVE-2021-21909
Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command
6.0
Medium
CVE-2021-21908
Specially-crafted command line arguments can lead to arbitrary file deletion
6.0
Medium
CVE-2021-21907
A directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detectors’ iC…
4.9
Medium
CVE-2021-21906
Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module…
8.2
High