← Back

Ic Module Firmware

ic_module_firmware

Vendor: Garrett • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Garrett
1Ic Module Firmware
Jun 17, 2026
Dec 22, 2021
N/A· v4
8.1 HIGH· v3
5.5 MEDIUM· v2
Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command. An attacker can provide malicious inputs to trigger this vulnerability
1Garrett
1Ic Module Firmware
Jun 17, 2026
Dec 22, 2021
N/A· v4
6.5 MEDIUM· v3
5.5 MEDIUM· v2
Specially-crafted command line arguments can lead to arbitrary file deletion. The handle_delete function does not attempt to sanitize or otherwise validate the contents of the [file] parameter (passed to the function as...Show more
Specially-crafted command line arguments can lead to arbitrary file deletion. The handle_delete function does not attempt to sanitize or otherwise validate the contents of the [file] parameter (passed to the function as argv[1]), allowing an authenticated attacker to supply directory traversal primitives and delete semi-arbitrary files.Show less