7.5
Élevée
CVE-2021-21902 An authentication bypass vulnerability exists in the CMA run_server_6877 functionality of Garrett Metal Detectors iC…
Description
An authentication bypass vulnerability exists in the CMA run_server_6877 functionality of Garrett Metal Detectors iC Module CMA Version 5.0. A properly-timed network connection can lead to authentication bypass via session hijacking. An attacker can send a sequence of requests to trigger this vulnerability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Garrett Metal Detectors | Versions non publiées |
Autres CVE de Garrett Metal Detectors
Les 9 CVE de Garrett Metal Detectors →
CVE-2021-21909
Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command
6.0
Moyenne
CVE-2021-21908
Specially-crafted command line arguments can lead to arbitrary file deletion
6.0
Moyenne
CVE-2021-21907
A directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detectors’ iC…
4.9
Moyenne
CVE-2021-21906
Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module…
8.2
Élevée