← CVE Intelligence

CVE-2021-21908

n/a / Garrett Metal Detectors PUBLISHED

Description (CNA)

Specially-crafted command line arguments can lead to arbitrary file deletion. The handle_delete function does not attempt to sanitize or otherwise validate the contents of the [file] parameter (passed to the function as argv[1]), allowing an authenticated attacker to supply directory traversal primitives and delete semi-arbitrary files.

Affected (CNA)

Vendor / productVersions
n/a / Garrett Metal Detectorsaffected Garrett Metal Detectors iC Module CMA Version 5.0

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.