What is CVE-2021-41316?

CVE-2021-41316 is a high-severity vulnerability in Device42, classified under Argument Injection. CVSS score: 8.1/10. Published 2021-09-17.

How severe is CVE-2021-41316?

High severity. CVSS v3 base score is 8.1 out of 10.

Vulnerability in Device42

CVE-2021-41316

The Device42 Main Appliance before 17.05.01 does not sanitize user input in its Nmap Discovery utility. An attacker (with permissions to add or edit jobs run by this utility) can inject an extra argument to overwrite arbitrary files as the root user on the Remote Collector.

EPSS: 0.014 (70.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H.

Affected products

Device42
N/a — versions n/a

Weakness classification (CWE)

CWE-88 — Argument Injection

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (Product, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-41316?: CVE-2021-41316 is a high-severity vulnerability in Device42, classified under Argument Injection. CVSS score: 8.1/10. Published 2021-09-17.
How severe is CVE-2021-41316?: High severity. CVSS v3 base score is 8.1 out of 10.