CVE-2021-40859

Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management application full administrative access to the device.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

71.98% chance of exploitation in the next 30 days, 99th percentile

Nuclei

critical

Published

2021-12-07

Updated

2024-08-04

Proof-of-concept exploits (3)

• https://www.redteam-pentesting.de/en/advisories/rt-sa-2021-007/-auerswald-compact-multipl…
• 419066074/CVE-2021-408595★ · 2021-12-28
• pussycat0x/CVE-2021-408595★ · 2021-12-29

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40859.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/50569

Exploit collections (1)

• zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2021/CVE-2021-40859.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2021-26855
• CVE-2021-40858
• CVE-2021-40865
• CVE-2021-40857
• CVE-2021-40866
• CVE-2021-40856