Skip to content
fr Sign in
6.0 Medium

CVE-2021-21908 Specially-crafted command line arguments can lead to arbitrary file deletion

Description

Specially-crafted command line arguments can lead to arbitrary file deletion. The handle_delete function does not attempt to sanitize or otherwise validate the contents of the [file] parameter (passed to the function as argv[1]), allowing an authenticated attacker to supply directory traversal primitives and delete semi-arbitrary files.

Affected products and versions

Product Affected versions Fixed in
Garrett Metal Detectors Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Garrett Metal Detectors

The 9 CVEs of Garrett Metal Detectors →
CVE-2021-21909 Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command 6.0 Medium CVE-2021-21907 A directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detectors’ iC… 4.9 Medium CVE-2021-21906 Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module… 8.2 High CVE-2021-21905 Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module… 8.2 High
Track this CVE