Vulnerability Spotlight: Vulnerabilities in metal detector peripheral could allow attackers to manipulate security devices
Summary: Cisco Talos discovered multiple vulnerabilities in the Garrett iC module, which provides network connectivity to the Garrett PD 6500i and MZ 6100 walk-through metal detectors used at security checkpoints. The flaws include stack-based buffer overflows (CVE-2021-21901, CVE-2021-21903, CVE-2021-21905, CVE-2021-21906) that can yield remote code execution, two of them before authentication, plus directory traversal and an authentication race condition, and Talos confirmed version 5.0 of the module could be exploited.
Bottom line: An attacker who reaches this module could change a detector's sensitivity setting or read whether its alarm has been triggered, so the equipment guarding a checkpoint can be quietly turned down or monitored from the network.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-21901CVE-2021-21902CVE-2021-21903CVE-2021-21904CVE-2021-21905CVE-2021-21906CVE-2021-21907CVE-2021-21908CVE-2021-21909
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026