Описание
A directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted command line argument can lead to local file inclusion. An attacker can provide malicious input to trigger this vulnerability.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:o:garrett:ic_module_cma:5.0:*:*:*:*:*:*:*
EPSS
Процентиль: 49%
0.00263
Низкий
4.9 Medium
CVSS3
4.9 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22
CWE-22
Связанные уязвимости
CVSS3: 4.9
github
около 4 лет назад
A directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted command line argument can lead to local file inclusion. An attacker can provide malicious input to trigger this vulnerability.
EPSS
Процентиль: 49%
0.00263
Низкий
4.9 Medium
CVSS3
4.9 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-22
CWE-22