CVE-2021-41315

HIGH 8.8CVE-2021-41315 · Published 17/09/2021 · updated 17/06/2026

In short

CVE-2021-41315 is a HIGH (CVSS 8.8) vulnerability affecting remote collector (device42).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 69.6% of all vulnerabilities.
Fix: update to 17.05.01 or later.

Package	Affected versions	Patched versions
remote collector device42	`< 17.05.01`	`17.05.01`

Description

The Device42 Remote Collector before 17.05.01 does not sanitize user input in its SNMP Connectivity utility. This allows an authenticated attacker (with access to the console application) to execute arbitrary OS commands and escalate privileges.

References

blog.device42.com/2021/09/critical-fixes-in-17-05-01 · Vendor Advisory
docs.device42.com/auto-discovery/remote-collector-rc · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free