CVE-2021-41316

The Device42 Main Appliance before 17.05.01 does not sanitize user input in its Nmap Discovery utility

published September 17, 2021

CVSS
—
EPSS
1%
Percentile
72.9
In the wild
Unconfirmed
What it is

The Device42 Main Appliance before 17.05.01 does not sanitize user input in its Nmap Discovery utility. An attacker (with permissions to add or edit jobs run by this utility) can inject an extra argument to overwrite arbitrary files as the root user on the Remote Collector.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01436 · 72.9th percentile
Published
2021-09-17T14:45Z
EPSS history
Timeline
  • 17 SEP 14:45Z
    The Device42 Main Appliance before 17.05.01 does not sanitize user input in its Nmap Discovery utility
    cvelistv5