CVE-2021-42257: Check Smart Project Check Smart

High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days.

check_smart before 6.9.1 allows unintended drive access by an unprivileged user because it only checks for a substring match of a device path (the /dev/bus substring and a number), aka an unanchored regular expression.

Affected products

• Check Smart Project Check Smart: before 6.9.1 (fixed in 6.9.1)

Published 2021-10-11. Last modified 2026-06-17.