PT-2021-14835 · Garrett · Ic Module Firmware

Matt Wiseman · Published 2021-12-22 · Updated 2022-07-21 · CVE-2021-21909

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue allows an attacker to trigger arbitrary file deletion through specially-crafted command line arguments in the del .cnt|.log file delete command. This can be achieved by providing malicious inputs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2021-21909

Affected Products

Ic Module Firmware

References · 4

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2021-1359 · Exploit
• https://osv.dev/vulnerability/CVE-2021-21909 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-21909 · Security Note
• https://t.me/cibsecurity/34529 · Telegram Post