CVEvulnerability
CVE-2021-40859
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2021-12-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management application full administrative access to the device.
Affected configurations
• auerswald compact 5500r firmware 7.8a
• auerswald compact 5500r firmware 8.0b
References
- https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses Third Party Advisory
- https://www.redteam-pentesting.de/en/advisories/rt-sa-2021-007/-auerswald-compact-multiple-backdoors Exploit, Third Party Advisory
- https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses Third Party Advisory
- https://www.redteam-pentesting.de/en/advisories/rt-sa-2021-007/-auerswald-compact-multiple-backdoors Exploit, Third Party Advisory