CVE-2021-4105

moderate-risk
Published 2023-02-24

Improper Handling of Parameters vulnerability in BG-TEK COSLAT Firewall allows Remote Code Inclusion.This issue affects COSLAT Firewall: from 5.24.0.R.20180630 before 5.24.0.R.20210727.

Do I need to act?

-
0.61% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (8)

Coslat Rm2Ds2000 Firmware
Coslat Rm2S200 Firmware
Coslat Rm3S300 Firmware
Coslat Rm4S500 Firmware
Coslat Bx5S1D3 Firmware
Coslat Bx5S1D4 Firmware
Coslat Bx5S1D5 Firmware
Coslat Rm1Ds1000 Firmware

Affected Vendors

Bg-Tek

References (4)

Vendor Advisory http://blog.coslat.com/2021/07/onemli-kritik-guncelleme-2021-07-27.html
Third Party Advisory https://www.usom.gov.tr/bildirim/tr-23-0108
Vendor Advisory http://blog.coslat.com/2021/07/onemli-kritik-guncelleme-2021-07-27.html
Third Party Advisory https://www.usom.gov.tr/bildirim/tr-23-0108
48
/ 100
moderate-risk
Severity 32/34 · Critical
Exploitability 2/34 · Minimal
Exposure 14/34 · Moderate