What’s Vulnerable › Vulnerabilities

CVE-2021-41315

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-09-17 · updated 2026-06-17
• Weakness: CWE-78

Description

The Device42 Remote Collector before 17.05.01 does not sanitize user input in its SNMP Connectivity utility. This allows an authenticated attacker (with access to the console application) to execute arbitrary OS commands and escalate privileges.

Affected products

• Device42 Remote Collector: before 17.05.01 — fixed in 17.05.01

How to fix

Upgrade to a fixed version: Device42 Remote Collector 17.05.01. Check the vendor advisory for mitigations.

References

• https://blog.device42.com/2021/09/critical-fixes-in-17-05-01/
• https://docs.device42.com/auto-discovery/remote-collector-rc/
• https://blog.device42.com/2021/09/critical-fixes-in-17-05-01/
• https://docs.device42.com/auto-discovery/remote-collector-rc/

Get alerted when CVE-2021-41315 or the next vulnerability affects your stack