CVE-2021-21909 is a critical arbitrary file deletion vulnerability affecting Garrett IC Module and IC Module Firmware. An attacker can exploit this by providing specially crafted command-line arguments to the "del .cnt|.log" command, leading to the deletion of arbitrary files. With a CVSS score of 8.1 (HIGH), this vulnerability is network-exploitable with low attack complexity and requires low privileges, resulting in high impact to integrity and availability. While no public exploit code or active exploitation has been observed, the vulnerability has garnered some community discussion and media coverage, indicating awareness within the security community.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
5.0CPE matchmatch criteria | cpe:2.3:o:garrett:ic_module_firmware:5.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.