6.0
Moyenne
CVE-2021-21908 Specially-crafted command line arguments can lead to arbitrary file deletion
Description
Specially-crafted command line arguments can lead to arbitrary file deletion. The handle_delete function does not attempt to sanitize or otherwise validate the contents of the [file] parameter (passed to the function as argv[1]), allowing an authenticated attacker to supply directory traversal primitives and delete semi-arbitrary files.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Garrett Metal Detectors | Versions non publiées |
Références
- talosintelligence.com talosintelligence.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Garrett Metal Detectors
Les 9 CVE de Garrett Metal Detectors →
CVE-2021-21909
Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command
6.0
Moyenne
CVE-2021-21907
A directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detectors’ iC…
4.9
Moyenne
CVE-2021-21906
Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module…
8.2
Élevée
CVE-2021-21905
Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module…
8.2
Élevée