CVE-2021-40859

CVE-2021-40859 Auerswald COMpact 8.0B バックドアエクスプロイト 概要 Auerswald COMpact 5500R 7.8A および 8.0B デバイスにおいて、Webベースの管理アプリケーションにアクセスできる攻撃者に対し、デバイスへの完全な管理者権限を許可するバックドアが発見されました。 製品詳細 製品: COMpact 3000 ISDN, COMpact 3000 analog, COMpact 3000 VoIP, COMpact 4000, COMpact 5000R, COMpact 5200R, COMpact 5500R,...

EUVD-2021-28014

Malicious code in bioql PyPI...

EUVD-2021-28013

Malicious code in bioql PyPI...

Exploit for CVE-2021-40859

CVE-2021-40859 Auerswald COMpact 8.0B Backdoors exploit Ab...

CVE-2021-40858

Auerswald COMpact 5500R devices before 8.2B allow Arbitrary File Disclosure. A sub-admin can read the cleartext Admin password via the fileName=../../etc/passwd substring...

CVE-2021-40857

Auerswald COMpact 5500R devices before 8.2B allow Privilege Escalation via the passwd=1 substring...

CVE-2021-40857

Auerswald COMpact 5500R devices before 8.2B allow Privilege Escalation via the passwd=1 substring...

Privilege escalation

Auerswald COMpact 5500R devices before 8.2B allow Privilege Escalation via the passwd=1 substring...

CVE-2021-40858

Auerswald COMpact 5500R devices before 8.2B allow Arbitrary File Disclosure. A sub-admin can read the cleartext Admin password via the fileName=../../etc/passwd substring...

CVE-2021-40857

Auerswald COMpact 5500R devices before 8.2B allow Privilege Escalation via the passwd=1 substring...

CVE-2021-40858: Improper Limitation of a Pathname to a Restricted Directory

Auerswald COMpact 5500R devices before 8.2B allow Arbitrary File Disclosure. A sub-admin can read the cleartext Admin password via the fileName=../../etc/passwd substring...

CVE-2021-40857: Insufficiently Protected Credentials

Auerswald COMpact 5500R devices before 8.2B allow Privilege Escalation via the passwd=1 substring...

Auerswald Compact has an unspecified vulnerability

The Auerswald Compact Series is an Ict solution from Auerswald Germany. a security vulnerability exists in the Auerswald Compact Series that could be exploited by an attacker to access a web-based management application for full administrative access to the device...

Design/Logic Flaw

Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management application full administrative access to the device...

CVE-2021-40859

Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management application full administrative access to the device...

CVE-2021-40859: Undefined Security Weakness

Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management application full administrative access to the device...

PT-2021-22988

Name of the Vulnerable Software and Affected Versions Auerswald COMpact 5500R versions 7.8A through 8.0B Description Backdoors were discovered in the devices, allowing attackers with access to the web-based management application full administrative access to the device. Recommendations For...

PT-2021-22986

Name of the Vulnerable Software and Affected Versions Auerswald COMpact 5500R versions prior to 8.2B Description The issue allows Privilege Escalation via the passwd=1 substring. Recommendations For versions prior to 8.2B, update to version 8.2B or later to resolve the issue...

Auerswald COMpact 8.0B - Privilege Escalation Vulnerability

Exploit Title: Auerswald COMpact 8.0B - Privilege Escalation Exploit Author: RedTeam Pentesting GmbH Advisory: Auerswald COMpact Privilege Escalation RedTeam Pentesting discovered a vulnerability in the web-based management interface of the Auerswald COMpact 5500R PBX which allows low-privileged...

Auerswald COMpact 8.0B Privilege Escalation

Advisory: Auerswald COMpact Privilege Escalation RedTeam Pentesting discovered a vulnerability in the web-based management interface of the Auerswald COMpact 5500R PBX which allows low-privileged users to access passwords of administrative user accounts. Details ======= Product: COMpact 4000,...