Published: 07/12/2021 Updated: 10/12/2021

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 891

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management application full administrative access to the device.

Vulnerable Product	Search on Vulmon	Subscribe to Product
auerswald compact_5500r_firmware 7.8a
auerswald compact_5500r_firmware 8.0b

Check Point Reference: CPAI-2021-2140 Date Published: 20 Mar 2024 Severity: Critical ...

RedTeam Pentesting discovered several backdoors in the firmware for the Auerswald COMpact 5500R PBX These backdoors allow attackers who are able to access the web-based management application full administrative access to the device Versions 80B and below are affected ...

Full Disclosure mailing list archives   By Date By Thread </form>    [RT-SA-2021-007] Auerswald COMpact Multiple Backdoors   From: Red ...

Auerswald COMpact 8.0B Backdoors exploit

CVE-2021-40859 Auerswald COMpact 80B Backdoors exploit About Backdoors were discovered in Auerswald COMpact 5500R 78A and 80B devices, that allow attackers with access to the web based management application full administrative access to the device Product Details Product: COMpact 3000 ISDN, COMpact 3000 analog, COMpact 3000 VoIP, COMpact 4000, COMpact 5000(R), COMpact 5200

Auerswald COMpact 8.0B Backdoors exploit

CVE-2021-40859 Auerswald COMpact 80B Backdoors exploit About Backdoors were discovered in Auerswald COMpact 5500R 78A and 80B devices, that allow attackers with access to the web based management application full administrative access to the device Product Details Product: COMpact 3000 ISDN, COMpact 3000 analog, COMpact 3000 VoIP, COMpact 4000, COMpact 5000(R), COMpact 5200

Auerswald VoIP System Secret Backdoors -PoC

CVE-2021-40859 Auerswald VoIP System Secret Backdoors -PoC Tool usage: CVE-2021-40859py target:port

NVD-CWE-Other https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses https://www.redteam-pentesting.de/en/advisories/rt-sa-2021-007/-auerswald-compact-multiple-backdoors https://nvd.nist.gov https://github.com/419066074/CVE-2021-40859 https://packetstormsecurity.com/files/165168/Auerswald-COMpact-8.0B-Backdoors.html https://advisories.checkpoint.com/defense/advisories/public/2024/cpai-2021-2140.html

CVE-2021-40859

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect