CVE-2021-4105

CRITICAL

9.8

Description

Improper Handling of Parameters vulnerability in BG-TEK COSLAT Firewall allows Remote Code Inclusion.This issue affects COSLAT Firewall: from 5.24.0.R.20180630 before 5.24.0.R.20210727.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published2/24/2023

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

bg-tek:coslat_bx5s1d3bg-tek:coslat_bx5s1d3_firmwarebg-tek:coslat_bx5s1d4bg-tek:coslat_bx5s1d4_firmwarebg-tek:coslat_bx5s1d5bg-tek:coslat_bx5s1d5_firmwarebg-tek:coslat_rm1ds1000bg-tek:coslat_rm1ds1000_firmwarebg-tek:coslat_rm2ds2000bg-tek:coslat_rm2ds2000_firmwarebg-tek:coslat_rm2s200bg-tek:coslat_rm2s200_firmwarebg-tek:coslat_rm3s300bg-tek:coslat_rm3s300_firmwarebg-tek:coslat_rm4s500bg-tek:coslat_rm4s500_firmware

Weaknesses (CWE)

CWE-755

References

http://blog.coslat.com/2021/07/onemli-kritik-guncelleme-2021-07-27.html(iletisim@usom.gov.tr)

https://www.usom.gov.tr/bildirim/tr-23-0108(iletisim@usom.gov.tr)

http://blog.coslat.com/2021/07/onemli-kritik-guncelleme-2021-07-27.html(af854a3a-2127-422b-91ae-364da2661108)

https://www.usom.gov.tr/bildirim/tr-23-0108(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.