95 matches found
Auerswald COMfortel 1400/2600/3600 IP - Authentication Bypass
Auerswald COMfortel 1400/2600/3600 IP is susceptible to an authentication bypass vulnerability. Inserting the prefix "/about/../" allows bypassing the authentication check for the web-based configuration management interface. This enables attackers to gain access to the login credentials used for...
CVE-2021-40859
CVE-2021-40859 Auerswald COMpact 8.0B Backdoors exploit About Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management application full administrative access to the device. Product Details Product: COMpact 3000 ISDN,...
CVE-2021-40859
CVE-2021-40859 Auerswald VoIP System Secret Backdoors -PoC Tool usage: CVE-2021-40859.py http://target:port...
Auerswald COMmander 6000 / 6000R 8.6D - Path Traversal in the Provisioning Archi — Detect
Fingerprint / reachability check for Auerswald COMmander 6000 / 6000R 8.6D - Path Traversal in the Provisioning Archive Import Leading to Unauthenticated Root Code Execution CWE-22 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Auerswald COMmander 6000 / 6000R 8.6D - Path Traversal in...
Auerswald COMmander provisioning zip-slip root RCE
Unauthenticated POST provisioningdataimport zip-slip overwrites hping2 then POST netdiagnosticexecute runs the replaced binary as root. """Auerswald COMmander provisioning zip-slip → hping2 hijack → unauth root RCE.""" from future import annotations import io import uuid import zipfile import...
Auerswald COMmander 6000 8.6D Provisioning Import Root Code Execution
Auerswald COMmander 6000 and 6000R firmware version 8.6D build 128154 contain a provisioning archive import path traversal that can overwrite a root-consumed binary and achieve unauthenticated root code execution. https://packetstorm.news/download/235392...
Auerswald COMpact 5500R 7.8A and 8.0B Devices Backdoor Detection
Auerswald COMpact 5500R 7.8A and 8.0B devices contain an unauthenticated endpoint "https://192.168.1.2/aboutstate", enabling the bad actor to gain backdoor access to a web interface that allows for resetting the administrator password. !/usr/bin/env python3 -- coding: utf-8 -- """Auerswald COMpac...
Auerswald COMfortel 1400/2600/3600 IP - Authentication Bypass Detection
Auerswald COMfortel 1400/2600/3600 IP is susceptible to an authentication bypass vulnerability. Inserting the prefix "/about/../" allows bypassing the authentication check for the web-based configuration management interface. This enables attackers to gain access to the login credentials used for...
EUVD-2009-4038
Malware in sbrugna...
EUVD-2018-11645
Malware in sbrugna...
EUVD-2021-28013
Malicious code in bioql PyPI...
EUVD-2021-28014
Malicious code in bioql PyPI...
VulnCheck KEV: CVE-2021-40856
Auerswald COMfortel 1400 IP and 2600 IP before 2.8G devices allow Authentication Bypass via the /about/../ substring...
CVE-2021-40859
Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management application full administrative access to the device...
SUSE CVE-2009-4067
Buffer overflow in the auerswaldprobe function in the Auerswald Linux USB driver for the Linux kernel before 2.6.27 allows physically proximate attackers to execute arbitrary code, cause a denial of service via a crafted USB device, or take full control of the system...
Exploit for CVE-2021-40859
CVE-2021-40859 Auers...
Exploit for CVE-2021-40859
CVE-2021-40859 Auerswald COMpact 8.0B Backdoors exploit Ab...
Two backdoors detected in Auerswald VoIP ystem
By Deeba Ahmed The backdoors were detected during penetration testing by RedTeam Pentesting GmbH. This is a post from HackRead.com Read the original post: Two backdoors detected in Auerswald VoIP ystem...
