Certain Starcharge products are vulnerable to Directory Traversal via main.cgi. The affected products include: Nova 360 Cabinet <=1.3.0.0.6 - Fixed: 1.3.0.0.9 and Titan 180 Premium <=1.3.0.0.7b102 - Fixed: Beta1.3.0.1.0.
References
Link | Resource |
---|---|
http://starcharge.com | Vendor Advisory |
https://github.com/shortmore/trsh/blob/main/starcharge/CVE-2021-45418.md | Exploit Third Party Advisory |
https://vincss.net | Not Applicable |
Configurations
History
03 Jan 2022, 23:27
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:h:starcharge:titan_180_premium:-:*:*:*:*:*:*:* cpe:2.3:o:starcharge:nova_360_cabinet_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:starcharge:nova_360_cabinet:-:*:*:*:*:*:*:* cpe:2.3:o:starcharge:titan_180_premium_firmware:*:*:*:*:*:*:*:* |
|
First Time |
Starcharge nova 360 Cabinet
Starcharge titan 180 Premium Firmware Starcharge nova 360 Cabinet Firmware Starcharge Starcharge titan 180 Premium |
|
CWE | CWE-22 | |
CVSS |
v2 : v3 : |
v2 : 6.5
v3 : 8.8 |
References | (MISC) https://vincss.net - Not Applicable | |
References | (MISC) https://github.com/shortmore/trsh/blob/main/starcharge/CVE-2021-45418.md - Exploit, Third Party Advisory | |
References | (MISC) http://starcharge.com - Vendor Advisory |
22 Dec 2021, 16:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-12-22 16:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-45418
Mitre link : CVE-2021-45418
CVE.ORG link : CVE-2021-45418
JSON object : View
Products Affected
starcharge
- nova_360_cabinet
- titan_180_premium_firmware
- nova_360_cabinet_firmware
- titan_180_premium
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')