CVE-2021-4105
Critical
Description
Improper Handling of Parameters vulnerability in BG-TEK COSLAT Firewall allows Remote Code Inclusion. This issue affects COSLAT Firewall: from 5.24.0.R.20180630 before 5.24.0.R.20210727.
SeverityCritical
CVSS9.8
Exploit probability—
ProductBg-tek Coslat Bx5s1d3 Firmware
PublishedFeb 24, 2023
First seenFeb 24, 2023
Weakness typeCWE-755CWE-755
How to fix
Update
- bg-tek coslat_bx5s1d3_firmware5.24.0.r.20210727 or later
- bg-tek coslat_bx5s1d4_firmware5.24.0.r.20210727 or later
- bg-tek coslat_bx5s1d5_firmware5.24.0.r.20210727 or later
- bg-tek coslat_rm1ds1000_firmware5.24.0.r.20210727 or later
- bg-tek coslat_rm2ds2000_firmware5.24.0.r.20210727 or later
- bg-tek coslat_rm2s200_firmware5.24.0.r.20210727 or later
- bg-tek coslat_rm3s300_firmware5.24.0.r.20210727 or later
- bg-tek coslat_rm4s500_firmware5.24.0.r.20210727 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bg-tek coslat_bx5s1d3_firmware | 5.24.0.r.20180630 ≤ v < 5.24.0.r.20210727 | 5.24.0.r.20210727 |
| bg-tek coslat_bx5s1d4_firmware | 5.24.0.r.20180630 ≤ v < 5.24.0.r.20210727 | 5.24.0.r.20210727 |
| bg-tek coslat_bx5s1d5_firmware | 5.24.0.r.20180630 ≤ v < 5.24.0.r.20210727 | 5.24.0.r.20210727 |
| bg-tek coslat_rm1ds1000_firmware | 5.24.0.r.20180630 ≤ v < 5.24.0.r.20210727 | 5.24.0.r.20210727 |
| bg-tek coslat_rm2ds2000_firmware | 5.24.0.r.20180630 ≤ v < 5.24.0.r.20210727 | 5.24.0.r.20210727 |
| bg-tek coslat_rm2s200_firmware | 5.24.0.r.20180630 ≤ v < 5.24.0.r.20210727 | 5.24.0.r.20210727 |
| bg-tek coslat_rm3s300_firmware | 5.24.0.r.20180630 ≤ v < 5.24.0.r.20210727 | 5.24.0.r.20210727 |
| bg-tek coslat_rm4s500_firmware | 5.24.0.r.20180630 ≤ v < 5.24.0.r.20210727 | 5.24.0.r.20210727 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.