Vulnerability Details CVE-2021-40857
Auerswald COMpact 5500R devices before 8.2B allow Privilege Escalation via the passwd=1 substring.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.014
EPSS Ranking 79.5%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
References
- http://packetstormsecurity.com/files/165163/Auerswald-COMpact-8.0B-Privilege-Escalation.html
- https://www.redteam-pentesting.de/advisories/rt-sa-2021-005
- https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses
- http://packetstormsecurity.com/files/165163/Auerswald-COMpact-8.0B-Privilege-Escalation.html
- https://www.redteam-pentesting.de/advisories/rt-sa-2021-005
- https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses
Products affected by CVE-2021-40857
-
cpe:2.3:h:auerswald:commander_6000r_ip:-
-
cpe:2.3:h:auerswald:commander_6000rx_ip:-
-
cpe:2.3:h:auerswald:commander_basic.2(19")_ip:-
-
cpe:2.3:h:auerswald:commander_business(19")_ip:-
-
cpe:2.3:h:auerswald:compact_4000r_ip:-
-
cpe:2.3:h:auerswald:compact_5000r_ip:-
-
cpe:2.3:h:auerswald:compact_5010_voip_ip:-
-
cpe:2.3:h:auerswald:compact_5020_voip_ip:-
-
cpe:2.3:h:auerswald:compact_5200r_ip:-
-
cpe:2.3:h:auerswald:compact_5500r_ip:-
-
cpe:2.3:o:auerswald:commander_6000r_ip_firmware:*
-
cpe:2.3:o:auerswald:commander_6000rx_ip_firmware:*
-
cpe:2.3:o:auerswald:commander_basic.2(19")_ip_firmware:*
-
cpe:2.3:o:auerswald:commander_business(19")_ip_firmware:*
-
cpe:2.3:o:auerswald:compact_4000_ip_firmware:*
-
cpe:2.3:o:auerswald:compact_5000r_ip_firmware:*
-
cpe:2.3:o:auerswald:compact_5010_voip_ip_firmware:*
-
cpe:2.3:o:auerswald:compact_5020_voip_ip_firmware:*
-
cpe:2.3:o:auerswald:compact_5200r_ip_firmware:*
-
cpe:2.3:o:auerswald:compact_5500r_ip_firmware:*