CVE-2021-40857

CVE-2021-40857 affects Auerswald COMpact line (notably 5500R) and related models. The vulnerability is a Privilege Escalation in the web-based management interface, exploitable via the passwd=1 substring, allowing low-privileged users to obtain administrator passwords. Affected versions are ≤ 8.0...

CVE-2021-40858

Auerswald COMpact 5500R and related models are affected by CVE-2021-40858 via an Arbitrary File Disclosure in the web-based management interface. The root cause is a path traversal issue that lets users with sub-admin privileges read files on the device, exposing cleartext admin passwords through...