Unscored CVE-2021-40858 EUVD-2021-28014GHSA-9w6r-rp23-g8hv

Auerswald COMpact 5500R devices before 8.2B allow Arbitrary File Disclosure. A sub-admin can read the cleartext Admin password via the file…

Published Dec 13, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

Auerswald COMpact 5500R devices before 8.2B allow Arbitrary File Disclosure. A sub-admin can read the cleartext Admin password via the fileName=../../etc/passwd substring.

References

https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses
http://packetstormsecurity.com/files/165166/Auerswald-COMpact-8.0B-Arbitrary-File-Disclosure.html
https://www.redteam-pentesting.de/advisories/rt-sa-2021-006