garrett records

9 published records for vendor garrett.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2021-21903No exploit	A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Module CMA Version 5.0.garrett · ic module cma · CWE-120 Pre-auth Memory safety	Critical9.8	—	1.7%	Dec 22, 2021
35Monitor	CVE-2021-21901No exploit	A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Module CMA Version 5.0.garrett · ic module cma · CWE-120 Memory safety	High8.8	—	1.6%	Dec 22, 2021
33Monitor	CVE-2021-21902No exploit	An authentication bypass vulnerability exists in the CMA run_server_6877 functionality of Garrett Metal Detectors iC Module CMA Version 5.0.garrett · ic module cma · CWE-303 Pre-auth Auth bypass	High8.1	—	1.7%	Dec 22, 2021
32Monitor	CVE-2021-21909No exploit	Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt\|.log file delete command.garrett · ic module firmware · CWE-22 Path traversal	High8.1	—	1.0%	Dec 22, 2021
29Monitor	CVE-2021-21904No exploit	A directory traversal vulnerability exists in the CMA CLI setenv command of Garrett Metal Detectors’ iC Module CMA Version 5.0.garrett · ic module cma · CWE-22 Path traversal	High7.2	—	2.8%	Dec 22, 2021
28Monitor	CVE-2021-21906No exploit	Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module CMA Version 5.0 is usgarrett · ic module cma · CWE-121 Memory safety	High7.2	—	1.0%	Dec 22, 2021
28Monitor	CVE-2021-21905No exploit	Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module CMA Version 5.0 is usgarrett · ic module cma · CWE-121 Memory safety	High7.2	—	1.0%	Dec 22, 2021
26Monitor	CVE-2021-21908No exploit	Specially-crafted command line arguments can lead to arbitrary file deletion.garrett · ic module firmware · CWE-22 Path traversal	Medium6.5	—	1.4%	Dec 22, 2021
19Monitor	CVE-2021-21907No exploit	A directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detectors’ iC Module CMA Version 5.0garrett · ic module cma · CWE-22 Path traversal	Medium4.9	—	1.4%	Dec 22, 2021

CVE-2021-21903
40Plan
A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Module CMA Version 5.0.
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Memory safety
garrett · ic module cmaDec 22, 2021
CVE-2021-21901
35Monitor
A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Module CMA Version 5.0.
HighCVSS 8.8No exploitEPSS 2%
- Memory safety
garrett · ic module cmaDec 22, 2021
CVE-2021-21902
33Monitor
An authentication bypass vulnerability exists in the CMA run_server_6877 functionality of Garrett Metal Detectors iC Module CMA Version 5.0.
HighCVSS 8.1No exploitEPSS 2%
- Pre-auth
- Auth bypass
garrett · ic module cmaDec 22, 2021
CVE-2021-21909
32Monitor
Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command.
HighCVSS 8.1No exploitEPSS 1%
- Path traversal
garrett · ic module firmwareDec 22, 2021
CVE-2021-21904
29Monitor
A directory traversal vulnerability exists in the CMA CLI setenv command of Garrett Metal Detectors’ iC Module CMA Version 5.0.
HighCVSS 7.2No exploitEPSS 3%
- Path traversal
garrett · ic module cmaDec 22, 2021
CVE-2021-21906
28Monitor
Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module CMA Version 5.0 is us
HighCVSS 7.2No exploitEPSS 1%
- Memory safety
garrett · ic module cmaDec 22, 2021
CVE-2021-21905
28Monitor
Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module CMA Version 5.0 is us
HighCVSS 7.2No exploitEPSS 1%
- Memory safety
garrett · ic module cmaDec 22, 2021
CVE-2021-21908
26Monitor
Specially-crafted command line arguments can lead to arbitrary file deletion.
MediumCVSS 6.5No exploitEPSS 1%
- Path traversal
garrett · ic module firmwareDec 22, 2021
CVE-2021-21907
19Monitor
A directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detectors’ iC Module CMA Version 5.0
MediumCVSS 4.9No exploitEPSS 1%
- Path traversal
garrett · ic module cmaDec 22, 2021