CVE-2021-41316

The Device42 Main Appliance before 17.05.01 does not sanitize user input in its Nmap Discovery utility. An attacker (with permissions to add or edit jobs run by this utility) can inject an extra argument to overwrite arbitrary files as the root user on the Remote Collector.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:device42:device42:*:*:*:*:*:*:*:*

Information

Published : 2021-09-17 08:15

Updated : 2021-09-30 11:23


NVD link : CVE-2021-41316

Mitre link : CVE-2021-41316


JSON object : View

CWE
CWE-88

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Advertisement

dedicated server usa

Products Affected

device42

  • device42