CVE-2021-40857

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 13-12-2021 05:15

Last modified: - 31-03-2022 06:33

Total changes: - 4

Description

Auerswald COMpact 5500R devices before 8.2B allow Privilege Escalation via the passwd=1 substring.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Low

Attack complexity

Network

Attack vector

High

Availability

High

Confidentiality

High

Integrity

Low

Privileges required

Unchanged

Scope

None

User interaction

8.8

Base score

2.8

5.9

Exploitability score

Impact score

Verification logic

AND

vendor=auerswald AND product=compact_5500r_ip_firmware AND versionEndIncluding=8.0b

vendor=auerswald AND product=compact_5500r_ip AND version=-

AND

vendor=auerswald AND product=compact_5200r_ip_firmware AND versionEndIncluding=8.0b

vendor=auerswald AND product=compact_5200r_ip AND version=-

AND

vendor=auerswald AND product=compact_5000r_ip_firmware AND versionEndIncluding=8.0b

vendor=auerswald AND product=compact_5000r_ip AND version=-

AND

vendor=auerswald AND product=compact_4000_ip_firmware AND versionEndIncluding=8.0b

vendor=auerswald AND product=compact_4000r_ip AND version=-

AND

vendor=auerswald AND product=commander_6000r_ip_firmware AND versionEndIncluding=8.0b

vendor=auerswald AND product=commander_6000r_ip AND version=-

AND

vendor=auerswald AND product=commander_6000rx_ip_firmware AND versionEndIncluding=8.0b

vendor=auerswald AND product=commander_6000rx_ip AND version=-

AND

vendor=auerswald AND product=commander_business\(19\"\)_ip_firmware AND versionEndIncluding=8.0b

vendor=auerswald AND product=commander_business\(19\"\)_ip AND version=-

AND

vendor=auerswald AND product=commander_basic.2\(19\"\)_ip_firmware AND versionEndIncluding=8.0b

vendor=auerswald AND product=commander_basic.2\(19\"\)_ip AND version=-

AND

vendor=auerswald AND product=compact_5010_voip_ip_firmware AND versionEndIncluding=8.0b

vendor=auerswald AND product=compact_5010_voip_ip AND version=-

AND

vendor=auerswald AND product=compact_5020_voip_ip_firmware AND versionEndIncluding=8.0b

vendor=auerswald AND product=compact_5020_voip_ip AND version=-

Reference

Keywords

CVE-2021-40857

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-40857

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures