Aller au contenu
en Se connecter
8.2 Élevée

CVE-2021-21906 Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module…

Description

Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module CMA Version 5.0 is used at various locations. The Garrett iC Module exposes an authenticated CLI over TCP port 6877. This interface is used by a secondary GUI client, called “CMA Connect”, to interact with the iC Module on behalf of the user. Every time a user submits a password to the CLI password prompt, the buffer containing their input is passed as the password parameter to the checkPassword function.

Produits et versions touchés

Produit Versions touchées Corrigé en
Garrett Metal Detectors Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Garrett Metal Detectors

Les 9 CVE de Garrett Metal Detectors →
CVE-2021-21909 Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command 6.0 Moyenne CVE-2021-21908 Specially-crafted command line arguments can lead to arbitrary file deletion 6.0 Moyenne CVE-2021-21907 A directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detectors’ iC… 4.9 Moyenne CVE-2021-21905 Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module… 8.2 Élevée
Suivre cette CVE