CVE-2021-4105 : Improper Handling of Parameters vulnerability in BG-TEK COSLAT Firewall allows Remote Code Inclusion.This issue affects

Improper Handling of Parameters vulnerability in BG-TEK COSLAT Firewall allows Remote Code Inclusion.This issue affects COSLAT Firewall: from 5.24.0.R.20180630 before 5.24.0.R.20210727.

Published 2023-02-24 12:15:30

Updated 2023-07-07 19:20:20

Source Computer Emergency Response Team of the Republic of Turkey

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2021-4105

EPSS FAQ

0.21%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 60 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-4105

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	Computer Emergency Response Team of the Republic of Turkey
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2021-4105

https://www.usom.gov.tr/bildirim/tr-23-0108

Ulusal Siber Olaylara Müdahale Merkezi - USOM
Third Party Advisory
http://blog.coslat.com/2021/07/onemli-kritik-guncelleme-2021-07-27.html

ÖNEMLİ: Kritik Güncelleme - 27-07-2021 tarihinde yayınlanan güncelleme içeriği | Coslat Firewall Blog
Vendor Advisory

Products affected by CVE-2021-4105

Bg-tek » Coslat Bx5s1d3 Firmware
Versions from including (>=) 5.24.0.r.20180630 and before (<) 5.24.0.r.20210727
cpe:2.3:o:bg-tek:coslat_bx5s1d3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Bg-tek » Coslat Bx5s1d3 » Version: N/A
Bg-tek » Coslat Bx5s1d4 Firmware
Versions from including (>=) 5.24.0.r.20180630 and before (<) 5.24.0.r.20210727
cpe:2.3:o:bg-tek:coslat_bx5s1d4_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Bg-tek » Coslat Bx5s1d4 » Version: N/A
Bg-tek » Coslat Bx5s1d5 Firmware
Versions from including (>=) 5.24.0.r.20180630 and before (<) 5.24.0.r.20210727
cpe:2.3:o:bg-tek:coslat_bx5s1d5_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Bg-tek » Coslat Bx5s1d5 » Version: N/A
Bg-tek » Coslat Rm1ds1000 Firmware
Versions from including (>=) 5.24.0.r.20180630 and before (<) 5.24.0.r.20210727
cpe:2.3:o:bg-tek:coslat_rm1ds1000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Bg-tek » Coslat Rm1ds1000 » Version: N/A
Bg-tek » Coslat Rm2ds2000 Firmware
Versions from including (>=) 5.24.0.r.20180630 and before (<) 5.24.0.r.20210727
cpe:2.3:o:bg-tek:coslat_rm2ds2000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Bg-tek » Coslat Rm2ds2000 » Version: N/A
Bg-tek » Coslat Rm2s200 Firmware
Versions from including (>=) 5.24.0.r.20180630 and before (<) 5.24.0.r.20210727
cpe:2.3:o:bg-tek:coslat_rm2s200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Bg-tek » Coslat Rm2s200 » Version: N/A
Bg-tek » Coslat Rm3s300 Firmware
Versions from including (>=) 5.24.0.r.20180630 and before (<) 5.24.0.r.20210727
cpe:2.3:o:bg-tek:coslat_rm3s300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Bg-tek » Coslat Rm3s300 » Version: N/A
Bg-tek » Coslat Rm4s500 Firmware
Versions from including (>=) 5.24.0.r.20180630 and before (<) 5.24.0.r.20210727
cpe:2.3:o:bg-tek:coslat_rm4s500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Bg-tek » Coslat Rm4s500 » Version: N/A

Vulnerability Details : CVE-2021-4105

Exploit prediction scoring system (EPSS) score for CVE-2021-4105

CVSS scores for CVE-2021-4105

CWE ids for CVE-2021-4105

References for CVE-2021-4105

Products affected by CVE-2021-4105