CVE-2021-41316

The Device42 Main Appliance before 17.05.01 does not sanitize user input in its Nmap Discovery utility. An attacker (with permissions to add or edit jobs run by this utility) can inject an extra argument to overwrite arbitrary files as the root user on the Remote Collector.
Configurations

Configuration 1 (hide)

cpe:2.3:a:device42:device42:*:*:*:*:*:*:*:*

Information

Published : 2021-09-17 08:15

Updated : 2021-09-30 11:23


NVD link : CVE-2021-41316

Mitre link : CVE-2021-41316


JSON object : View

CWE
CWE-88

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Products Affected

device42

  • device42