CVE-2021-21904

CVE-2021-21904 is a directory traversal vulnerability found in the CMA CLI setenv command of Garrett Metal Detectors’ iC Module CMA, specifically version 5.0. An attacker can exploit this by providing malicious input. This vulnerability carries a high CVSS score of 7.2, indicating a network-based attack with low complexity, requiring high privileges, and leading to high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or readily available public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, including an article from BleepingComputer.