deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-45419
Published: 2021-12-22
Description: Certain Starcharge products are affected by Improper Input Validation. The affected products include: Nova 360 Cabinet <= 1.3.0.0.7b102 - Fixed: Beta1.3.0.1.0 and Titan 180 Premium <= 1.3.0.0.6 - Fixed: 1.3.0.0.9.
CVSS Score: 8.8 (HIGH)
CWE: CWE-345
References: http://starcharge.com; https://github.com/shortmore/trsh/blob/main/starcharge/CVE-2021-45419.md; https://vincss.net
CVE: CVE-2021-4113
Published: 2021-12-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none
CVE: CVE-2021-4114
Published: 2021-12-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none
CVE: CVE-2021-37706
Published: 2021-12-22
Description: PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before performing a subtraction operation, potentially resulting in an integer underflow scenario. This issue affects all users that use STUN. A malicious actor located within the victim’s network may forge and send a specially crafted UDP (STUN) message that could remotely execute arbitrary code on the victim’s machine. Users are advised to upgrade as soon as possible. There are no known workarounds.
CVSS Score: 7.3 (HIGH)
CWE: CWE-191, CWE-191
References: http://packetstormsecurity.com/files/166225/Asterisk-Project-Security-Advisory-AST-2022-004.html; http://seclists.org/fulldisclosure/2022/Mar/0; https://github.com/pjsip/pjproject/commit/15663e3f37091069b8c98a7fce680dc04bc8e865
CVE: CVE-2021-43155
Published: 2021-12-22
Description: Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/projectworldsofficial/online-book-store-project-in-php/issues/18; https://github.com/projectworldsofficial/online-book-store-project-in-php/issues/18
CVE: CVE-2021-43156
Published: 2021-12-22
Description: In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admin_delete.php allows a remote attacker to delete any book.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/projectworldsofficial/online-book-store-project-in-php/issues/19; https://github.com/projectworldsofficial/online-book-store-project-in-php/issues/19
CVE: CVE-2021-43157
Published: 2021-12-22
Description: Projectsworlds Online Shopping System PHP 1.0 is vulnerable to SQL injection via the id parameter in cart_remove.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/projectworldsofficial/online-shopping-webvsite-in-php/issues/1; https://projectworlds.in/free-projects/php-projects/free-download-online-shopping-system/; https://github.com/projectworldsofficial/online-shopping-webvsite-in-php/issues/1
CVE: CVE-2021-43158
Published: 2021-12-22
Description: In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a remote attacker to remove any product in the customer's cart.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/projectworldsofficial/online-shopping-webvsite-in-php/issues/2; https://projectworlds.in/free-projects/php-projects/free-download-online-shopping-system/; https://github.com/projectworldsofficial/online-shopping-webvsite-in-php/issues/2
CVE: CVE-2021-43628
Published: 2021-12-22
Description: Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/projectworldsofficial/hospital-management-system-in-php/issues/2; https://projectworlds.in/free-projects/php-projects/hospital-management-system-in-php/; https://github.com/projectworldsofficial/hospital-management-system-in-php/issues/2
CVE: CVE-2021-43629
Published: 2021-12-22
Description: Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in admin_home.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/projectworldsofficial/hospital-management-system-in-php/issues/3; https://projectworlds.in/free-projects/php-projects/hospital-management-system-in-php/; https://github.com/projectworldsofficial/hospital-management-system-in-php/issues/3
CVE: CVE-2021-43630
Published: 2021-12-22
Description: Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in add_patient.php. As a result, an authenticated malicious user can compromise the databases system and in some cases leverage this vulnerability to get remote code execution on the remote web server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/projectworldsofficial/hospital-management-system-in-php/issues/4; https://projectworlds.in/free-projects/php-projects/hospital-management-system-in-php/; https://github.com/projectworldsofficial/hospital-management-system-in-php/issues/4
CVE: CVE-2021-43631
Published: 2021-12-22
Description: Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointment_no parameter in payment.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/projectworldsofficial/hospital-management-system-in-php/issues/5; https://projectworlds.in/free-projects/php-projects/hospital-management-system-in-php/; https://github.com/projectworldsofficial/hospital-management-system-in-php/issues/5
CVE: CVE-2021-43804
Published: 2021-12-22
Description: PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming RTCP BYE message contains a reason's length, this declared length is not checked against the actual received packet size, potentially resulting in an out-of-bound read access. This issue affects all users that use PJMEDIA and RTCP. A malicious actor can send a RTCP BYE message with an invalid reason length. Users are advised to upgrade as soon as possible. There are no known workarounds.
CVSS Score: 7.3 (HIGH)
CWE: CWE-125, CWE-125
References: https://github.com/pjsip/pjproject/commit/8b621f192cae14456ee0b0ade52ce6c6f258af1e; https://github.com/pjsip/pjproject/security/advisories/GHSA-3qx3-cg72-wrh9; https://lists.debian.org/debian-lts-announce/2022/03/msg00035.html
CVE: CVE-2021-44659
Published: 2021-12-22
Description: Adding a new pipeline in GoCD server version 21.3.0 has a functionality that could be abused to do an un-intended action in order to achieve a Server Side Request Forgery (SSRF). NOTE: the vendor's position is that the observed behavior is not a vulnerability, because the product's design allows an admin to configure outbound requests
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://github.com/Mesh3l911/CVE-2021-44659; https://github.com/gocd/gocd; https://www.gocd.org/
CVE: CVE-2021-45260
Published: 2021-12-22
Description: A null pointer dereference vulnerability exists in gpac 1.1.0 in the lsr_read_id.part function, which causes a segmentation fault and application crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/issues/1979; https://github.com/gpac/gpac/issues/1979
CVE: CVE-2021-45261
Published: 2021-12-22
Description: An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-763
References: https://savannah.gnu.org/bugs/?61685; https://savannah.gnu.org/bugs/?61685
CVE: CVE-2021-45262
Published: 2021-12-22
Description: An invalid free vulnerability exists in gpac 1.1.0 via the gf_sg_command_del function, which causes a segmentation fault and application crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/gpac/gpac/issues/1980; https://www.debian.org/security/2023/dsa-5411; https://github.com/gpac/gpac/issues/1980
CVE: CVE-2021-45263
Published: 2021-12-22
Description: An invalid free vulnerability exists in gpac 1.1.0 via the gf_svg_delete_attribute_value function, which causes a segmentation fault and application crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/gpac/gpac/issues/1975; https://www.debian.org/security/2023/dsa-5411; https://github.com/gpac/gpac/issues/1975
CVE: CVE-2021-45266
Published: 2021-12-22
Description: A null pointer dereference vulnerability exists in gpac 1.1.0 via the lsr_read_anim_values_ex function, which causes a segmentation fault and application crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/gpac/gpac/issues/1985; https://github.com/gpac/gpac/issues/1985
CVE: CVE-2021-45267
Published: 2021-12-22
Description: An invalid memory address dereference vulnerability exists in gpac 1.1.0 via the svg_node_start function, which causes a segmentation fault and application crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/issues/1965; https://www.debian.org/security/2023/dsa-5411; https://github.com/gpac/gpac/issues/1965
CVE: CVE-2021-21872
Published: 2021-12-22
Description: An OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1312; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1312
CVE: CVE-2021-21873
Published: 2021-12-22
Description: A specially-crafted HTTP request can lead to arbitrary command execution in RSA keypasswd parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1314; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1314
CVE: CVE-2021-21874
Published: 2021-12-22
Description: A specially-crafted HTTP request can lead to arbitrary command execution in DSA keypasswd parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1314; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1314
CVE: CVE-2021-21875
Published: 2021-12-22
Description: A specially-crafted HTTP request can lead to arbitrary command execution in EC keypasswd parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1314; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1314
CVE: CVE-2021-21876
Published: 2021-12-22
Description: Specially-crafted HTTP requests can lead to arbitrary command execution in PUT requests. An attacker can make authenticated HTTP requests to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1315; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1315
CVE: CVE-2021-21877
Published: 2021-12-22
Description: Specially-crafted HTTP requests can lead to arbitrary command execution in “GET” requests. An attacker can make authenticated HTTP requests to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1315; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1315
CVE: CVE-2021-21878
Published: 2021-12-22
Description: A local file inclusion vulnerability exists in the Web Manager Applications and FsBrowse functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted series of HTTP requests can lead to local file inclusion. An attacker can make a series of authenticated HTTP requests to trigger this vulnerability.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-668, CWE-668
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1322; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1322
CVE: CVE-2021-21879
Published: 2021-12-22
Description: A directory traversal vulnerability exists in the Web Manager File Upload functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary file overwrite. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1323; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1323
CVE: CVE-2021-21880
Published: 2021-12-22
Description: A directory traversal vulnerability exists in the Web Manager FsCopyFile functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to local file inclusion. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22, CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1324; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1324
CVE: CVE-2021-21881
Published: 2021-12-22
Description: An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1325; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1325
CVE: CVE-2021-21882
Published: 2021-12-22
Description: An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1326; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1326
CVE: CVE-2021-21883
Published: 2021-12-22
Description: An OS command injection vulnerability exists in the Web Manager Diagnostics: Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1327; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1327
CVE: CVE-2021-21884
Published: 2021-12-22
Description: An OS command injection vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1328; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1328
CVE: CVE-2021-21885
Published: 2021-12-22
Description: A directory traversal vulnerability exists in the Web Manager FsMove functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially crafted HTTP request can lead to local file inclusion. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22, CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1329; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1329
CVE: CVE-2021-21886
Published: 2021-12-22
Description: A directory traversal vulnerability exists in the Web Manager FSBrowsePage functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially crafted HTTP request can lead to information disclosure. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1330; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1330
CVE: CVE-2021-21887
Published: 2021-12-22
Description: A stack-based buffer overflow vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted HTTP request can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1331; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1331
CVE: CVE-2021-21888
Published: 2021-12-22
Description: An OS command injection vulnerability exists in the Web Manager SslGenerateCertificate functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1332; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1332
CVE: CVE-2021-21889
Published: 2021-12-22
Description: A stack-based buffer overflow vulnerability exists in the Web Manager Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted HTTP request can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1333; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1333
CVE: CVE-2021-21890
Published: 2021-12-22
Description: A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted HTTP request can lead to remote code execution in the vulnerable portion of the branch (deletedir). An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1334; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1334
CVE: CVE-2021-21891
Published: 2021-12-22
Description: A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted HTTP request can lead to remote code execution in the vulnerable portion of the branch (deletefile). An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1334; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1334
CVE: CVE-2021-21892
Published: 2021-12-22
Description: A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted HTTP request can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1335; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1335
CVE: CVE-2021-21894
Published: 2021-12-22
Description: A directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted HTTP request can lead to arbitrary file overwrite FsTFtp file disclosure. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1337; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1337
CVE: CVE-2021-21895
Published: 2021-12-22
Description: A directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted HTTP request can lead to FsTFtp file overwrite. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-22, CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1337; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1337
CVE: CVE-2021-21896
Published: 2021-12-22
Description: A directory traversal vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted HTTP request can lead to arbitrary file deletion. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1338; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1338
CVE: CVE-2021-21901
Published: 2021-12-22
Description: A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted packet can lead to a stack-based buffer overflow during a call to memcpy. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1353; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1353
CVE: CVE-2021-21902
Published: 2021-12-22
Description: An authentication bypass vulnerability exists in the CMA run_server_6877 functionality of Garrett Metal Detectors iC Module CMA Version 5.0. A properly-timed network connection can lead to authentication bypass via session hijacking. An attacker can send a sequence of requests to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-303, CWE-287
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1354; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1354
CVE: CVE-2021-21903
Published: 2021-12-22
Description: A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted packet can lead to a stack-based buffer overflow during a call to strcpy. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1355; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1355
CVE: CVE-2021-21904
Published: 2021-12-22
Description: A directory traversal vulnerability exists in the CMA CLI setenv command of Garrett Metal Detectors’ iC Module CMA Version 5.0. An attacker can provide malicious input to trigger this vulnerability
CVSS Score: 7.2 (HIGH)
CWE: CWE-22, CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1356; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1356