CVE-2021-40680

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-04-25 · updated 2026-06-17
Weakness: CWE-22

Description

There is a Directory Traversal vulnerability in Artica Proxy (4.30.000000 SP206 through SP255, and VMware appliance 4.30.000000 through SP273) via the filename parameter to /cgi-bin/main.cgi.

Affected products

ArticaTech Web Proxy: 4.30.000000-sp206, 4.30.000000-sp255, 4.30.000000-sp267, 4.30.000000-sp268, 4.30.000000-sp269, 4.30.000000-sp270 (+3)

References

http://seclists.org/fulldisclosure/2022/Apr/39
http://seclists.org/fulldisclosure/2022/Apr/39

Get alerted when CVE-2021-40680 or the next vulnerability affects your stack