CVE-2021-40859 EXPLOIT
9.8
CRITICAL · CVSS 3.1 · EPSS 72% (pctl 99)
Patch early
A public exploit exists.
Description
Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management application full administrative access to the device.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 71.98% — more likely to be exploited than 99% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2021-12-07 |
| Last modified | 2026-06-17 |
Affected (2)
| Vendor | Product |
|---|---|
| auerswald | compact 5500r |
| auerswald | compact 5500r firmware |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Auerswald COMpact 8.0B - Multiple Backdoors | 2021-12-06 |
References
- https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses
- https://www.redteam-pentesting.de/en/advisories/rt-sa-2021-007/-auerswald-compact-multiple-backdoors
- https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses
- https://www.redteam-pentesting.de/en/advisories/rt-sa-2021-007/-auerswald-compact-multiple-backdoors
→ the Explorer · watch your stack · NVD