CVE-2021-4105 Unauthenticated Remote Code Execution on COSLAT Firewall
Unauthenticated attackers can execute arbitrary code on COSLAT Firewall devices due to improper parameter handling.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-4105?
CVE-2021-4105 is a critical code injection vulnerability in BG-TEK COSLAT Firewall, published on 24 Feb 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Improper Handling of Parameters vulnerability in BG-TEK COSLAT Firewall allows Remote Code Inclusion.
This issue affects COSLAT Firewall: from 5.24.0.R.20180630 before 5.24.0.R.20210727.
Weakness: CWE-755
Which versions are affected by CVE-2021-4105?
It affects 8 products.
Products include Bg-Tek Coslat Bx5s1d3 Firmware, Bg-Tek Coslat Bx5s1d4 Firmware, Bg-Tek Coslat Bx5s1d5 Firmware, Bg-Tek Coslat Rm1ds1000 Firmware, Bg-Tek Coslat Rm2ds2000 Firmware, Bg-Tek Coslat Rm2s200 Firmware and 2 more.
How do I fix CVE-2021-4105?
No fix has been published for CVE-2021-4105 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2021-4105 being exploited?
There is no known exploitation of CVE-2021-4105 in the wild and no public exploit code.
Sources
Also known as GHSA-gr7g-5rvj-cf96.