CVE-2021-40661

A remote, unauthenticated, directory traversal vulnerability was identified within the web interface used by IND780 Advanced Weighing Terminals Build 8.0.07 March 19, 2018 (SS Label 'IND780_8.0.07'), Version 7.2.10 June 18, 2012 (SS Label 'IND780_7.2.10'). It was possible to traverse the folders of the affected host by providing a traversal path to the 'webpage' parameter in AutoCE.ini This could allow a remote unauthenticated adversary to access additional files on the affected system. This could also allow the adversary to perform further enumeration against the affected host to identify the versions of the systems in use, in order to launch further attacks in future.

• CWE-22
• CWE-22

• https://sidsecure.au/blog/cve-2021-40661/?_sm_pdc=1&_sm_rid=MRRqb4KBDnjBMJk24b40LMS3SKqPMqb4KVn32KrExploit, Third Party Advisory
• https://www.mt.com/au/en/home/products/Industrial_Weighing_Solutions/Terminals-and-Controllers/terminals-bench-floor-scales/advanced-bench-floor-applications/IND780/IND780_.html#overviewpmProduct, Vendor Advisory
• https://sidsecure.au/blog/cve-2021-40661/?_sm_pdc=1&_sm_rid=MRRqb4KBDnjBMJk24b40LMS3SKqPMqb4KVn32KrExploit, Third Party Advisory
• https://www.mt.com/au/en/home/products/Industrial_Weighing_Solutions/Terminals-and-Controllers/terminals-bench-floor-scales/advanced-bench-floor-applications/IND780/IND780_.html#overviewpmProduct, Vendor Advisory

Published

Oct 31, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40654An information disclosure issue exist in D-LINK-DIR-615 B2 2…6.5
• CVE-2021-40655An informtion disclosure issue exists in D-LINK-DIR-605 B2 F…7.5
• CVE-2021-40656libsixel before 1.10 is vulnerable to Buffer Overflow in lib…8.8
• CVE-2021-40658Textpattern 4.8.7 is affected by a HTML injection vulnerabil…4.8
• CVE-2021-4066Integer underflow in ANGLE in Google Chrome prior to 96.0.46…8.8
• CVE-2021-40660An issue was discovered in Delight Nashorn Sandbox 0.2.0. Th…7.5
• CVE-2021-40662A Cross-Site Request Forgery (CSRF) in Chamilo LMS 1.11.14 a…8.8
• CVE-2021-40663deep.assign npm package 0.0.0-alpha.0 is vulnerable to Impro…9.8
• CVE-2021-40668The Android application HTTP File Server (Version 1.4.1) by …8.1
• CVE-2021-40669SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via th…9.8
• CVE-2021-4067Use after free in window manager in Google Chrome on ChromeO…8.8
• CVE-2021-40670SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via th…9.8