4.9
Medium
CVE-2021-21907 A directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detectors’ iC…
Description
A directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted command line argument can lead to local file inclusion. An attacker can provide malicious input to trigger this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Garrett Metal Detectors | Versions not published |
References
- talosintelligence.com talosintelligence.com
Timeline
- Published
- Last modified
Other CVEs of Garrett Metal Detectors
The 9 CVEs of Garrett Metal Detectors →
CVE-2021-21909
Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command
6.0
Medium
CVE-2021-21908
Specially-crafted command line arguments can lead to arbitrary file deletion
6.0
Medium
CVE-2021-21906
Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module…
8.2
High
CVE-2021-21905
Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module…
8.2
High