Vulnerability · Published Dec 22, 2021 · Assigned by talos
CVE-2021-21904
Critical 9.1
In plain English
A critical-severity path traversal in Garrett Metal Detectors. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.9% (higher than 87% of all known vulnerabilities).
Severity (CVSS 3.0)9.1Critical
Exploit odds (30 days)2.9%top 13.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A directory traversal vulnerability exists in the CMA CLI setenv command of Garrett Metal Detectors’ iC Module CMA Version 5.0. An attacker can provide malicious input to trigger this vulnerability
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Garrett Metal Detectors | Garrett Metal Detectors iC Module CMA Version 5.0 |
Weakness: CWE-22 · Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2021-1356 x_refsource_MISC