CVE-2021-21902

CVE-2021-21902 is an authentication bypass vulnerability affecting the CMA run_server_6877 functionality in Garrett Metal Detectors iC Module CMA Version 5.0. An attacker can exploit this by sending a properly-timed sequence of network requests, leading to session hijacking. This vulnerability is rated 8.1 HIGH on the CVSS scale, indicating a severe risk with high impact on confidentiality, integrity, and availability, requiring no user interaction and having high attack complexity. There is no evidence of active exploitation, nor are there publicly available exploit codes like Metasploit or Nuclei modules; however, it has garnered some community discussion and media coverage.