medium4.9
CVE-2021-40858
Auerswald COMpact 5500R devices before 8.2B allow Arbitrary File Disclosure.
Impact
Auerswald COMpact 5500R devices before 8.2B allow Arbitrary File Disclosure. A sub-admin can read the cleartext Admin password via the fileName=../../etc/passwd substring.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Auerswald | Compact 5500r Ip Firmware | through 8.0b |
| Auerswald | Compact 5200r Ip Firmware | through 8.0b |
| Auerswald | Compact 5000r Ip Firmware | through 8.0b |
| Auerswald | Compact 4000 Ip Firmware | through 8.0b |
| Auerswald | Commander 6000r Ip Firmware | through 8.0b |
| Auerswald | Commander 6000rx Ip Firmware | through 8.0b |
| Auerswald | Commander Business\(19\"\) Ip Firmware | through 8.0b |
| Auerswald | Commander Basic.2\(19\"\) Ip Firmware | through 8.0b |
| Auerswald | Compact 5010 Voip Ip Firmware | through 8.0b |
| Auerswald | Compact 5020 Voip Ip Firmware | through 8.0b |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/165166/Auerswald-COMpact-8.0B-Arbitrary-File-Disclosure.html
- https://www.redteam-pentesting.de/advisories/rt-sa-2021-006
- https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses
- http://packetstormsecurity.com/files/165166/Auerswald-COMpact-8.0B-Arbitrary-File-Disclosure.html
- https://www.redteam-pentesting.de/advisories/rt-sa-2021-006
- https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses