CVE-2021-41316

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

The Device42 Main Appliance before 17.05.01 does not sanitize user input in its Nmap Discovery utility. An attacker (with permissions to add or edit jobs run by this utility) can inject an extra argument to overwrite arbitrary files as the root user on the Remote Collector.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-88

Affected software

No affected versions have been published.

Timeline

Published
Sep 17, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-413179.8XSS Hunter Express before 2021-09-17 does not properly enforce authentication requirements for paths.CVE-2021-413186.1In Progress WhatsUp Gold prior to version 21.1.0, an application endpoint failed to adequately sanitize malicious input. which could allow aCVE-2021-41325.4livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2021-413205.5A technical user has hardcoded credentials in Wallstreet Suite TRM 7.4.83 (64-bit edition) with higher privilege than the average authenticaCVE-2021-413228.8Poly VVX 400/410 5.3.1 allows low-privileged users to change the Admin password by modifying a POST parameter to 120 during the password resCVE-2021-413236.5Directory traversal in the Compress feature in Pydio Cells 2.2.9 allows remote authenticated users to overwrite personal files, or Cells filCVE-2021-413246.5Directory traversal in the Copy, Move, and Delete features in Pydio Cells 2.2.9 allows remote authenticated users to enumerate personal fileCVE-2021-413256.5Broken access control for user creation in Pydio Cells 2.2.9 allows remote anonymous users to create standard users via the profile parameteCVE-2021-413269.8In MISP before 2.4.148, app/Lib/Export/OpendataExport.php mishandles parameter data that is used in a shell_exec call.CVE-2021-413296.5Datalust Seq before 2021.2.6259 allows users (with view filters applied to their accounts) to see query results not constrained by their vieCVE-2021-41338.8A flaw was found in Keycloak in versions from 12.0.0 and before 15.1.1 which allows an attacker with any existing user account to create newCVE-2021-413307.8Microsoft Windows Media Foundation Remote Code Execution Vulnerability