Vulnerability Spotlight: Vulnerabilities in metal detector peripheral could allow attackers to manipulate security devices
60
CVE-2021-21908
PoC —CVSS 3.1
6.5 medium
EPSS
1%p72
Published
()
Modified
Description
Specially-crafted command line arguments can lead to arbitrary file deletion. The handle_delete function does not attempt to sanitize or otherwise validate the contents of the [file] parameter (passed to the function as argv[1]), allowing an authenticated attacker to supply directory traversal primitives and delete semi-arbitrary files.
- Vendors
- garrett
- Products
- ic module firmware
- Weakness
- CWE-22
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
In the news2 stories
47