CVE-2021-21909

Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command. An attacker can provide malicious inputs to trigger this vulnerability...

CVE-2021-21909

CVE-2021-21909 affects Garrett Metal Detectors iC Module CMA Version 5.0. Affected component is the CMA CLI (del/delenv) exposed over TCP (port 6877) with an authenticated CLI. Root cause is improper validation/sanitization of the user-supplied file argument in handle_delete/delEnv, allowing dire...