CVE-2021-41316

ALTO 8.1CVE-2021-41316 · Published 17/09/2021 · updated 17/06/2026

In breve

CVE-2021-41316 è una vulnerabilità ALTO (CVSS 8.1) che riguarda device42 (device42).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.4%, superiore al 73.1% delle vulnerabilità.
Correzione: aggiornare a 17.05.01 o successiva.

Package	Affected versions	Patched versions
device42 device42	`< 17.05.01`	`17.05.01`

Description

The Device42 Main Appliance before 17.05.01 does not sanitize user input in its Nmap Discovery utility. An attacker (with permissions to add or edit jobs run by this utility) can inject an extra argument to overwrite arbitrary files as the root user on the Remote Collector.

References

blog.device42.com/2021/09/critical-fixes-in-17-05-01 · Vendor Advisory
docs.device42.com/auto-discovery/nmap-autodiscovery · Product
docs.device42.com/auto-discovery/remote-collector-rc · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free