PatchTheCVEgarrett vulnerabilities
Recent CVEs affecting garrett products. 9 tracked.
garrett has 9 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-12-22. Highest priority: CVE-2021-21903 (score 64/100).
- CVE-2021-21909 HIGH 8.1 MITIGATE Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete
- CVE-2021-21908 MEDIUM 6.5 MITIGATE Specially-crafted command line arguments can lead to arbitrary file deletion
- CVE-2021-21907 MEDIUM 4.9 MITIGATE A directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detect
- CVE-2021-21906 HIGH 7.2 MITIGATE Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors i
- CVE-2021-21905 HIGH 7.2 MITIGATE Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors i
- CVE-2021-21904 HIGH 7.2 MITIGATE A directory traversal vulnerability exists in the CMA CLI setenv command of Garrett Metal Detectors’ iC Module
- CVE-2021-21903 CRITICAL 9.8 MITIGATE A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detector
- CVE-2021-21902 HIGH 8.1 MITIGATE An authentication bypass vulnerability exists in the CMA run_server_6877 functionality of Garrett Metal Detect
- CVE-2021-21901 HIGH 8.8 MITIGATE A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detector
FAQ
How do I fix garrett vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is garrett being exploited right now?
None of the tracked garrett CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which garrett CVE should I patch first?
CVE-2021-21903 currently ranks highest (64/100): A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detector.