CVE-2021-40857
published 2021-12-13CVE-2021-40857: Auerswald COMpact 5500R devices before 8.2B allow Privilege Escalation via the passwd=1 substring.
PriorityP358high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EXPLOIT
EPSS
2.03%
78.6th percentile
Auerswald COMpact 5500R devices before 8.2B allow Privilege Escalation via the passwd=1 substring.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| auerswald | commander_6000r_ip_firmware | <= 8.0b | — |
| auerswald | commander_6000rx_ip_firmware | <= 8.0b | — |
| auerswald | commander_basic.2_ip_firmware | <= 8.0b | — |
| auerswald | commander_business_ip_firmware | <= 8.0b | — |
| auerswald | compact_4000_ip_firmware | <= 8.0b | — |
| auerswald | compact_5000r_ip_firmware | <= 8.0b | — |
| auerswald | compact_5010_voip_ip_firmware | <= 8.0b | — |
| auerswald | compact_5020_voip_ip_firmware | <= 8.0b | — |
| auerswald | compact_5200r_ip_firmware | <= 8.0b | — |
| auerswald | compact_5500r_ip_firmware | <= 8.0b | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://packetstormsecurity.com/files/165163/Auerswald-COMpact-8.0B-Privilege-Escalation.htmlhttps://www.redteam-pentesting.de/advisories/rt-sa-2021-005https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyseshttp://packetstormsecurity.com/files/165163/Auerswald-COMpact-8.0B-Privilege-Escalation.htmlhttps://www.redteam-pentesting.de/advisories/rt-sa-2021-005https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses
2021-12-13
Published