CVE-2021-4105: Bg-Tek Coslat BX5S1D3 Firmware

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Improper Handling of Parameters vulnerability in BG-TEK COSLAT Firewall allows Remote Code Inclusion. This issue affects COSLAT Firewall: from 5.24.0.R.20180630 before 5.24.0.R.20210727.

Affected products

  • Bg-Tek Coslat BX5S1D3 Firmware: from 5.24.0.r.20180630, before 5.24.0.r.20210727 (fixed in 5.24.0.r.20210727)
  • Bg-Tek Coslat BX5S1D4 Firmware: from 5.24.0.r.20180630, before 5.24.0.r.20210727 (fixed in 5.24.0.r.20210727)
  • Bg-Tek Coslat BX5S1D5 Firmware: from 5.24.0.r.20180630, before 5.24.0.r.20210727 (fixed in 5.24.0.r.20210727)
  • Bg-Tek Coslat RM1DS1000 Firmware: from 5.24.0.r.20180630, before 5.24.0.r.20210727 (fixed in 5.24.0.r.20210727)
  • Bg-Tek Coslat RM2DS2000 Firmware: from 5.24.0.r.20180630, before 5.24.0.r.20210727 (fixed in 5.24.0.r.20210727)
  • Bg-Tek Coslat RM2S200 Firmware: from 5.24.0.r.20180630, before 5.24.0.r.20210727 (fixed in 5.24.0.r.20210727)
  • Bg-Tek Coslat RM3S300 Firmware: from 5.24.0.r.20180630, before 5.24.0.r.20210727 (fixed in 5.24.0.r.20210727)
  • Bg-Tek Coslat RM4S500 Firmware: from 5.24.0.r.20180630, before 5.24.0.r.20210727 (fixed in 5.24.0.r.20210727)

Published 2023-02-24. Last modified 2026-06-17.