CVE-2021-4105
Assigner: TR-CERT
Published: 2023-02-24T11:09:46.710Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: COSLAT Firewall
vendor: BG-TEK
versions: lessThan: 5.24.0.r.20210727
status: affected
version: 5.24.0.r.20180630
versionType: custom
datePublic: 2023-02-24T11:00:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: Improper Handling of Parameters vulnerability in BG-TEK COSLAT Firewall allows Remote Code Inclusion.<p>This issue affects COSLAT Firewall: from 5.24.0.R.20180630 before 5.24.0.R.20210727.</p>
value: Improper Handling of Parameters vulnerability in BG-TEK COSLAT Firewall allows Remote Code Inclusion.This issue affects COSLAT Firewall: from 5.24.0.R.20180630 before 5.24.0.R.20210727.


impacts: capecId: CAPEC-253
descriptions: value: CAPEC-253 Remote Code Inclusion
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-755
description: CWE-755 Improper Handling of Exceptional Conditions
type: CWE
solutions: supportingMedia: base64: no
type: text/html
value: Update the version to &gt;=

5.24.0.r.20210727


value: Update the version to >=

5.24.0.r.20210727


source: advisory: TR-23-0108
defect: TR-23-0108
discovery: UNKNOWN
timeline: time: 2021-07-26T21:00:00.000Z
value: Vendor patched the vulnerability.
title: Unauthenticated Remote Code Execution on COSLAT Firewall
x_generator: engine: Vulnogram 0.1.0-dev