CVE-2021-40661 — AI Deep Analysis Summary

Q: What can hackers do? (Privileges/Data)

🕵️ **Attacker Action**: Access other files on the host. 🔓 **Privileges**: Unauthenticated! 📂 **Data**: Sensitive system files, configs, or potentially source code. 💣 **Impact**: Information Disclosure.

Q: Is exploitation threshold high? (Auth/Config)

🚪 **Auth Required**: **NO**. Unauthenticated. ⚙️ **Config**: Requires access to the web interface and ability to modify `AutoCE.ini`. 📉 **Threshold**: **LOW**. Easy to exploit if network access exists.

Q: Is there a public Exp? (PoC/Wild Exploitation)

📜 **Public Exp?**: **YES**. 🔗 **PoC**: Available via ProjectDiscovery Nuclei templates. 🌐 **Wild Exp**: Likely, given the simplicity of LFI. Check Nuclei repo for YAML template. 🧪

Q: How to self-check? (Features/Scanning)

🔍 **Self-Check**: 1. Identify IND780 terminals. 2. Check version (8.0.07 or 7.2.10). 3. Scan for `AutoCE.ini` accessibility. 4. Use Nuclei template to test path traversal. 🛡️

Q: Is it fixed officially? (Patch/Mitigation)

🩹 **Official Patch**: Data does not mention a specific patch release date. 📝 **Status**: Vulnerability disclosed in 2022. ⚠️ **Action**: Check vendor site for updates. Mitigation is key if no patch exists.

Q: What if no patch? (Workaround)

🚧 **No Patch Workaround**: 1. **Isolate**: Block network access to the web interface. 2. **Restrict**: Limit who can edit `AutoCE.ini`. 3. **Monitor**: Watch for unusual file access logs. 🛑

Q: Is it urgent? (Priority Suggestion)

🔥 **Urgency**: **HIGH**. 📉 **Risk**: Unauthenticated + LFI = Easy win for attackers. 🏭 **Context**: Industrial systems are often unpatched. ✅ **Priority**: Patch immediately or isolate from network! 🚨

Updated May 08, 2026

This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login. Read the full analysis →

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: Path Traversal / Local File Inclusion (LFI). <br>💥 **Consequences**: Attackers can read arbitrary files on the affected system by manipulating the 'webpage' parameter in AutoCE.ini.…

Read full answer (login)

Q2Root Cause? (CWE/Flaw)

🛠️ **Root Cause**: Improper input validation on the 'webpage' parameter. <br>🔍 **Flaw**: Allows relative path traversal (e.g., `../`).…

Read full answer (login)

Q3Who is affected? (Versions/Components)

🏭 **Vendor**: METTLER TOLEDO. <br>📦 **Product**: IND780 Advanced Weighing Terminals. <br>📅 **Affected Versions**: <br>• Build 8.0.07 (Mar 19, 2018) <br>• Version 7.2.10 (Jun 18, 2012).…

Read full answer (login)

Q4What can hackers do? (Privileges/Data)

🕵️ **Attacker Action**: Access other files on the host. <br>🔓 **Privileges**: Unauthenticated! <br>📂 **Data**: Sensitive system files, configs, or potentially source code. <br>💣 **Impact**: Information Disclosure.

Q5Is exploitation threshold high? (Auth/Config)

🚪 **Auth Required**: **NO**. Unauthenticated. <br>⚙️ **Config**: Requires access to the web interface and ability to modify `AutoCE.ini`. <br>📉 **Threshold**: **LOW**. Easy to exploit if network access exists.

Q6Is there a public Exp? (PoC/Wild Exploitation)

📜 **Public Exp?**: **YES**. <br>🔗 **PoC**: Available via ProjectDiscovery Nuclei templates. <br>🌐 **Wild Exp**: Likely, given the simplicity of LFI. Check Nuclei repo for YAML template. 🧪

Q7How to self-check? (Features/Scanning)

🔍 **Self-Check**: <br>1. Identify IND780 terminals. <br>2. Check version (8.0.07 or 7.2.10). <br>3. Scan for `AutoCE.ini` accessibility. <br>4. Use Nuclei template to test path traversal. 🛡️

Q8Is it fixed officially? (Patch/Mitigation)

🩹 **Official Patch**: Data does not mention a specific patch release date. <br>📝 **Status**: Vulnerability disclosed in 2022. <br>⚠️ **Action**: Check vendor site for updates. Mitigation is key if no patch exists.

Q9What if no patch? (Workaround)

🚧 **No Patch Workaround**: <br>1. **Isolate**: Block network access to the web interface. <br>2. **Restrict**: Limit who can edit `AutoCE.ini`. <br>3. **Monitor**: Watch for unusual file access logs. 🛑

Q10Is it urgent? (Priority Suggestion)

🔥 **Urgency**: **HIGH**. <br>📉 **Risk**: Unauthenticated + LFI = Easy win for attackers. <br>🏭 **Context**: Industrial systems are often unpatched. <br>✅ **Priority**: Patch immediately or isolate from network! 🚨

Continue exploring

Vulnerability detail Full AI analysis (login) n/a