Nuclei Template
View the template here CVE-2021-40661.yaml
Validate with Nuclei
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-40661.yaml
IND780 Advanced Weighing Terminals Build 8.0.07 March 19, 2018 (SS Label ‘IND780_8.0.07’), Version 7.2.10 June 18, 2012 (SS Label ‘IND780_7.2.10’) is vulnerable to unauthenticated local file inclusion. It is possible to traverse the folders of the affected host by providing a relative path to the ‘webpage’ parameter in AutoCE.ini. This could allow a remote attacker to access additional files on the affected system.
View the template here CVE-2021-40661.yaml
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-40661.yaml
References:
https://www.mt.com/au/en/home/products/Industrial_Weighing_Solutions/Terminals-and-Controllers/terminals-bench-floor-scales/advanced-bench-floor-applications/IND780/IND780_.html#overviewpm