Published on: Not Yet Published
Last Modified on: 11/02/2022 03:50:00 PM UTC
CVE-2021-40661Source: Mitre Source: NIST CVE.ORG Print: PDF
Certain versions of Ind780 from Mt contain the following vulnerability:
A remote, unauthenticated, directory traversal vulnerability was identified within the web interface used by IND780 Advanced Weighing Terminals Build 8.0.07 March 19, 2018 (SS Label 'IND780_8.0.07'), Version 7.2.10 June 18, 2012 (SS Label 'IND780_7.2.10'). It was possible to traverse the folders of the affected host by providing a traversal path to the 'webpage' parameter in AutoCE.ini This could allow a remote unauthenticated adversary to access additional files on the affected system. This could also allow the adversary to perform further enumeration against the affected host to identify the versions of the systems in use, in order to launch further attacks in future.
- CVE-2021-40661 has been assigned by [email protected] to track the vulnerability - currently rated as HIGH severity.
CVSS3 Score: 7.5 - HIGH
|Unauthenticated Directory Traversal - SidSecure Cyber Security|| sidsecure.au |
|IND780 Advanced Weighing Terminal - Overview - METTLER TOLEDO|| www.mt.com |
Exploit/POC from Github
This repository contains a collection of data files on known Common Vulnerabilities and Exposures (CVEs). Each file i…
Known Affected Configurations (CPE V2.3)
|@CVEreport||CVE-2021-40661 : A remote, unauthenticated, directory traversal vulnerability was identified within the web interfa… twitter.com/i/web/status/1…||2022-10-31 12:06:43|
|@JohnJasonFallow||New vulnerability on the NVD: CVE-2021-40661 ift.tt/xDlbyGo||2022-10-31 14:11:54|