CVE-2021-40857

HIGH

Auerswald COMpact 5500R <8.2B - Privilege Escalation

Title source: llm
STIX 2.1

Description

Auerswald COMpact 5500R devices before 8.2B allow Privilege Escalation via the passwd=1 substring.

References (3)

Core 3
Core References
Exploit, Third Party Advisory x_refsource_misc
https://www.redteam-pentesting.de/advisories/rt-sa-2021-005

Scores

CVSS v3 8.8
EPSS 0.0203
EPSS Percentile 78.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-522
Status published
Products (10)
auerswald/commander_6000r_ip_firmware < 8.0b
auerswald/commander_6000rx_ip_firmware < 8.0b
auerswald/commander_basic.2\(19\"\)_ip_firmware < 8.0b
auerswald/commander_business\(19\"\)_ip_firmware < 8.0b
auerswald/compact_4000_ip_firmware < 8.0b
auerswald/compact_5000r_ip_firmware < 8.0b
auerswald/compact_5010_voip_ip_firmware < 8.0b
auerswald/compact_5020_voip_ip_firmware < 8.0b
auerswald/compact_5200r_ip_firmware < 8.0b
auerswald/compact_5500r_ip_firmware < 8.0b
Published Dec 13, 2021
Tracked Since Feb 18, 2026