CVE-2021-40859

EUVD-2021-28015
Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management application full administrative access to the device.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 99%
Affected Products (NVD)
VendorProductVersion
auerswaldcompact_5500r_firmware
7.8a:a
auerswaldcompact_5500r_firmware
8.0b:b
𝑥
= Vulnerable software versions
References
https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses
https://www.redteam-pentesting.de/en/advisories/rt-sa-2021-007/-auerswald-compact-multiple-backdoors
https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses
https://www.redteam-pentesting.de/en/advisories/rt-sa-2021-007/-auerswald-compact-multiple-backdoors