CVE-2021-21902

HIGH

Garrett iC Module CMA - Authentication Bypass via Session Hijacking

Title source: llm
STIX 2.1

Description

An authentication bypass vulnerability exists in the CMA run_server_6877 functionality of Garrett Metal Detectors iC Module CMA Version 5.0. A properly-timed network connection can lead to authentication bypass via session hijacking. An attacker can send a sequence of requests to trigger this vulnerability.

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1354

Scores

CVSS v3 8.1
EPSS 0.0172
EPSS Percentile 74.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-287 CWE-303
Status published
Products (1)
garrett/ic_module_cma 5.0
Published Dec 22, 2021
Tracked Since Feb 18, 2026