Auerswald COMpact 5500R devices before 8.2B allow Arbitrary File Disclosure. A sub-admin can read the cleartext Admin password via the fileName=../../etc/passwd substring.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/165166/Auerswald-COMpact-8.0B-Arbitrary-File-Disclosure.html | Exploit Third Party Advisory VDB Entry |
| https://www.redteam-pentesting.de/advisories/rt-sa-2021-006 | Exploit Third Party Advisory |
| https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
Configuration 6 (hide)
| AND |
|
Configuration 7 (hide)
| AND |
|
Configuration 8 (hide)
| AND |
|
Configuration 9 (hide)
| AND |
|
Configuration 10 (hide)
| AND |
|
History
04 Jan 2022, 16:08
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://www.redteam-pentesting.de/advisories/rt-sa-2021-006 - Exploit, Third Party Advisory |
22 Dec 2021, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
16 Dec 2021, 14:13
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:auerswald:compact_5010_voip_ip_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:auerswald:compact_5000r_ip:-:*:*:*:*:*:*:* cpe:2.3:o:auerswald:commander_6000r_ip_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:auerswald:commander_6000rx_ip:-:*:*:*:*:*:*:* cpe:2.3:o:auerswald:compact_5020_voip_ip_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:auerswald:compact_4000_ip_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:auerswald:compact_5500r_ip_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:auerswald:commander_business\(19\"\)_ip_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:auerswald:compact_5010_voip_ip:-:*:*:*:*:*:*:* cpe:2.3:h:auerswald:commander_basic.2\(19\"\)_ip:-:*:*:*:*:*:*:* cpe:2.3:o:auerswald:compact_5200r_ip_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:auerswald:compact_5500r_ip:-:*:*:*:*:*:*:* cpe:2.3:h:auerswald:commander_business\(19\"\)_ip:-:*:*:*:*:*:*:* cpe:2.3:o:auerswald:compact_5000r_ip_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:auerswald:compact_5020_voip_ip:-:*:*:*:*:*:*:* cpe:2.3:o:auerswald:commander_6000rx_ip_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:auerswald:commander_6000r_ip:-:*:*:*:*:*:*:* cpe:2.3:o:auerswald:commander_basic.2\(19\"\)_ip_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:auerswald:compact_4000r_ip:-:*:*:*:*:*:*:* cpe:2.3:h:auerswald:compact_5200r_ip:-:*:*:*:*:*:*:* |
|
| CWE | CWE-22 | |
| CVSS |
v2 : v3 : |
v2 : 6.8
v3 : 4.9 |
| References | (MISC) https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses - Exploit, Third Party Advisory | |
| References | (MISC) http://packetstormsecurity.com/files/165166/Auerswald-COMpact-8.0B-Arbitrary-File-Disclosure.html - Exploit, Third Party Advisory, VDB Entry |
13 Dec 2021, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-12-13 04:15
Updated : 2024-02-04 22:08
NVD link : CVE-2021-40858
Mitre link : CVE-2021-40858
CVE.ORG link : CVE-2021-40858
JSON object : View
Products Affected
auerswald
- compact_4000_ip_firmware
- compact_5020_voip_ip
- commander_6000r_ip
- compact_5200r_ip
- compact_4000r_ip
- commander_business\(19\"\)_ip
- commander_basic.2\(19\"\)_ip_firmware
- compact_5500r_ip_firmware
- compact_5500r_ip
- commander_6000r_ip_firmware
- commander_6000rx_ip
- compact_5010_voip_ip
- compact_5000r_ip_firmware
- compact_5200r_ip_firmware
- commander_business\(19\"\)_ip_firmware
- commander_6000rx_ip_firmware
- compact_5000r_ip
- commander_basic.2\(19\"\)_ip
- compact_5010_voip_ip_firmware
- compact_5020_voip_ip_firmware
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')