PatchTheCVECVE-2021-21904: A directory traversal vulnerability exists in the CMA CLI setenv command of Garrett Metal Detectors’ iC Module
CVE-2021-21904 is a high-severity flaw (CVSS 7.2) affecting ic module cma. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A directory traversal vulnerability exists in the CMA CLI setenv command of Garrett Metal Detectors’ iC Module CMA Version 5.0. An attacker can provide malicious input to trigger this vulnerability
Why this priority
- High severity
- Public exploit reference
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 7.2 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | High |
| User interaction | None |
| EPSS exploit chance | 2.9% (top 13%) |
| CISA exploited list | No |
| Weakness | CWE-22 |
| Published | 2021-12-22 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2021-21904?
ic module cma: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2021-21904 being exploited?
CVE-2021-21904 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2021-21904 affect?
CVE-2021-21904 affects ic module cma. Severity is high (CVSS 7.2). A directory traversal vulnerability exists in the CMA CLI setenv command of Garrett Metal Detectors’ iC Module CMA Version 5.0. An attacker can provide malicious input to trigger this vulnerability
How urgent is CVE-2021-21904?
Priority 52/100. High severity; Public exploit reference
Related CVEs
- CVE-2021-21907 MEDIUM 4.9 MITIGATE A directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detect
- CVE-2021-21906 HIGH 7.2 MITIGATE Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors i
- CVE-2021-21905 HIGH 7.2 MITIGATE Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors i
- CVE-2021-21903 CRITICAL 9.8 MITIGATE A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detector
- CVE-2021-21902 HIGH 8.1 MITIGATE An authentication bypass vulnerability exists in the CMA run_server_6877 functionality of Garrett Metal Detect