Skip to content
OpenAdvisories
Medium · 4.9 CVE-2021-21907 EUVD-2021-9078GHSA-mr9v-gjm8-c8rm

A directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detectors’ iC Module CMA Version 5.…

Published Dec 22, 2021 · Updated Aug 3, 2024 · Assigned by talos

Description

A directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted command line argument can lead to local file inclusion. An attacker can provide malicious input to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
— Garrett Metal Detectors Garrett Metal Detectors iC Module CMA Version 5.0 —

References