CVE-2021-45418 : Security Advisory and Response

Certain Starcharge products are vulnerable to Directory Traversal via main.cgi. The affected products include: Nova 360 Cabinet <=1.3.0.0.6 - Fixed: 1.3.0.0.9 and Titan 180 Premium <=1.3.0.0.7b102 - Fixed: Beta1.3.0.1.0.

Understanding CVE-2021-45418

What is CVE-2021-45418?

CVE-2021-45418 describes a vulnerability in certain Starcharge products that allows Directory Traversal via main.cgi.

The Impact of CVE-2021-45418

This vulnerability can be exploited to traverse directories on affected systems, potentially leading to unauthorized access to sensitive files and data.

Technical Details of CVE-2021-45418

Vulnerability Description

The vulnerability allows attackers to navigate directories on the target system using main.cgi.

Affected Systems and Versions

Nova 360 Cabinet <=1.3.0.0.6
Titan 180 Premium <=1.3.0.0.7b102

Exploitation Mechanism

Attackers can exploit this vulnerability by manipulating input to main.cgi to traverse directories and access unauthorized files.

Mitigation and Prevention

Immediate Steps to Take

Update the affected products to the fixed versions: Nova 360 Cabinet 1.3.0.0.9, Titan 180 Premium Beta1.3.0.1.0
Implement access controls and input validation mechanisms to prevent directory traversal attacks.

Long-Term Security Practices

Regularly monitor and audit file access and directory traversal attempts on systems.

Patching and Updates

Stay informed about security updates and patches from Starcharge and apply them promptly.